Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json)
Hash identifier: WC6Yc275lLFFSMIRt8ynbjTSDcUMQHiyCgn2Xoy4fJo=
Subject key identifier: EA:7C:A6:ED:80:3A:13:66:A9:87:7E:2D:44:D7:10:56:D2:8D:B9:72
Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86
Certificate serial: 0194BBCF0A3BE67F93578ADDAD1FB076382D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
Manifest number: 08F4
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: xk31m+Mtsr5Wcpr5f5nLwDkWliRGnNTYpuCIBFwDndM=)
2: GESlc56i4-gdhOlM9uZOfgy8aCc.roa (hash: 9R3PoH4Q7y5D2LVnthi2TWzvIx4vLCuEUl/il2GVgqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:0a:3b:e6:7f:93:57:8a:dd:ad:1f:b0:76:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=ea7ca6ed803a1366a9877e2d44d71056d28db972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:16:77:5e:f4:2e:26:b3:72:8a:4b:7e:bd:
33:f8:ce:50:16:28:7e:fd:4c:72:95:66:25:51:76:
6a:f0:a7:c3:dc:a2:37:45:e8:81:f7:d7:d4:9a:1e:
6d:6b:93:f4:40:48:06:f0:84:d3:ed:e6:ed:d0:6e:
05:64:69:00:9c:60:4a:59:a7:19:0c:d8:74:47:d0:
3c:71:28:ad:e5:f1:78:90:66:1a:6f:77:08:21:fd:
c7:ad:ea:f1:56:95:7e:46:44:89:35:77:e4:39:a0:
b4:f8:46:06:df:ae:2e:18:36:c8:17:c0:c3:09:37:
17:18:e0:10:25:e8:f4:56:73:97:e0:aa:93:fb:f9:
80:4c:57:ce:a5:f9:54:7f:1a:0e:08:f5:25:91:de:
4c:9d:35:e0:05:ba:62:66:f2:b5:77:d4:9c:84:c8:
b1:8d:33:e9:95:08:0f:5f:52:a0:f2:1d:3d:a9:ee:
88:d8:7f:e5:1d:d0:a0:e2:7b:b7:59:ff:df:0b:f1:
7f:b6:ba:e5:16:d8:a6:9e:50:e1:d2:62:63:de:c0:
0e:36:46:80:4e:26:ae:4c:f7:76:6e:85:20:66:3d:
61:88:44:68:67:f8:d1:11:a7:aa:68:69:80:9f:2d:
08:38:61:7d:c8:95:e9:39:6b:93:a2:01:e5:ca:cf:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:A6:ED:80:3A:13:66:A9:87:7E:2D:44:D7:10:56:D2:8D:B9:72
X509v3 Authority Key Identifier:
keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fd:45:08:72:5c:47:af:94:18:6b:6c:a0:c9:bb:df:de:d0:
ad:a9:a1:4f:e8:7a:bb:b2:50:13:ab:7e:ed:9e:bc:1a:8c:7c:
8e:11:9a:8c:e8:45:25:a4:1d:a5:e6:cd:de:0e:d0:42:5a:69:
8e:b6:f7:0d:c9:81:80:0f:ca:e2:f8:aa:33:fa:c5:8c:85:e1:
25:5f:b3:92:1c:b6:ff:2d:17:06:50:3f:72:4e:bf:c7:78:da:
5b:9c:30:57:bf:1d:3c:df:e0:fe:1e:97:50:97:6d:e5:d8:9b:
16:85:a2:e3:b4:1e:64:92:2a:72:50:70:84:e2:06:c1:f1:cd:
92:9e:c8:52:ac:b4:2e:2c:bd:9c:be:51:11:d7:dd:45:e1:4d:
b9:27:9e:e0:dd:2a:91:b0:50:9e:cd:33:1e:bc:45:89:1c:32:
3b:88:79:77:8a:b2:81:6f:7b:e4:29:08:37:39:7f:63:6f:7b:
c7:7d:27:05:ac:19:ac:83:b7:1e:db:8b:25:7e:9d:f9:31:f1:
11:a4:60:ed:40:51:88:c3:8c:f1:60:23:4b:22:09:99:c6:eb:
d3:0d:75:b3:71:9b:32:5d:96:76:b1:bb:f2:4e:f1:5c:8d:cb:
a6:d4:6c:cd:d9:11:ef:7c:0d:51:2b:32:88:7e:07:ea:72:0c:
3a:ab:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:23 2025 by rpki-client