Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: zfSMxw52fQXczcfd3TjnjrLB9xbR6GTt6cplJU+jz3w=
Subject key identifier: 4A:80:5D:2D:91:61:76:95:DA:9E:4C:32:9D:0C:83:5F:2B:80:70:45
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 0194BD85429E6C40051FFA9BC00AC2180E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0A33
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: AS8BQmf1x2L3apB3GXq9Ged8kmJ/zLRPfuglZcynZow=)
2: PF_eVnR65kNetKj7PMmx-v4rMFw.roa (hash: /4k6yxxkJCQSm4rG3gdwumQHjo0wfUW3Pw4ZNvKY7P0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:9e:6c:40:05:1f:fa:9b:c0:0a:c2:18:0e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=4a805d2d91617695da9e4c329d0c835f2b807045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2e:d2:64:66:cd:e4:b7:a0:97:68:7e:96:a8:
23:1c:1b:34:4d:40:ad:ac:42:b1:5d:b2:5a:9e:0d:
f6:32:92:89:d8:8f:31:8a:f7:1f:be:88:10:4e:a0:
6d:70:f4:b4:d8:21:99:50:09:1d:21:c6:3c:01:94:
81:17:7f:48:b8:12:46:ee:6c:89:b4:a5:aa:e2:26:
29:4d:95:6b:69:ed:63:6d:3c:ae:92:2e:75:57:0d:
4a:c1:70:8f:42:3b:41:31:d8:ed:d2:5c:27:41:6c:
c1:70:f6:03:1d:2d:06:91:fb:c9:fa:c0:fc:e2:b8:
4b:67:ba:0e:e5:96:4c:6c:12:db:1c:63:7b:18:1a:
af:74:b5:47:16:9e:96:e0:6c:ec:06:c9:8d:54:1a:
70:98:f4:a8:6a:70:29:7c:cf:8b:93:50:72:1a:bf:
bc:2c:c6:61:91:b9:19:90:a1:90:75:44:3f:7a:40:
3b:0b:53:07:96:c8:d9:85:fd:7b:a4:9d:46:d1:70:
9d:58:ab:98:3f:07:86:31:a8:20:d0:62:dd:e1:b4:
c0:c4:1b:dd:d8:7f:ac:d5:d0:af:1b:f7:19:2a:f9:
3e:58:56:f7:4f:97:ee:d2:fa:87:65:5f:e0:3c:c2:
ce:8e:cb:d1:7a:a6:5c:19:f8:2f:d9:76:f3:76:06:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:5D:2D:91:61:76:95:DA:9E:4C:32:9D:0C:83:5F:2B:80:70:45
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:2b:9e:21:26:db:20:7e:72:32:a4:f0:6a:a7:c1:b0:a1:
2c:c8:cd:e2:3b:f6:6e:04:cc:90:f6:00:16:63:03:27:5b:19:
fb:38:da:91:2a:bb:e5:be:c3:2b:d3:b0:5f:b9:89:c1:97:0f:
42:c8:a3:ba:cd:e8:1d:4c:f3:d2:58:87:5e:b5:b6:73:4c:6e:
91:f8:21:7f:ce:fd:a2:67:06:4c:3d:28:a6:c4:96:f2:8d:90:
42:ed:73:8b:66:4a:39:fd:86:a3:7c:16:59:fe:ca:41:57:17:
51:c4:7a:5d:f1:b2:29:3b:35:b7:54:bc:ef:19:60:ea:bd:d7:
64:e2:25:1b:5b:df:86:91:ed:ff:8a:dd:6d:9f:ba:f6:19:5f:
52:dd:c2:9e:33:68:f5:27:a7:57:92:fe:e8:a2:3e:b1:54:9e:
e3:ab:2f:be:ea:38:c0:88:3e:b8:de:99:21:c2:c9:c6:6e:7d:
38:6a:b0:ab:b5:59:a8:f5:83:11:53:33:c9:6f:a3:5e:4d:f5:
ce:dc:38:25:28:ef:52:65:05:54:08:7c:a3:86:6b:be:1c:85:
8a:60:94:a1:7b:2b:f4:2d:37:b6:60:23:7b:fb:70:3b:2a:6d:
c4:15:42:e1:92:8b:42:0a:6d:4e:b2:23:95:fe:dd:79:91:d4:
06:f2:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:16 2025 by rpki-client