Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File: AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier: kELOhR5yHF5gC0xRsy0LnBTJ4WO2WjG/qtCXiHGKuWg=
Subject key identifier: A0:DF:1A:D4:29:30:4C:62:66:E3:87:E3:7C:64:04:BB:B3:D3:3D:B3
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer: /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial: 0194BC05091315407A5FCACABF9C793C3251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: 1HVBxmdkhXRMLHHo9HKb5kghgqTdoKeDzxDRbE2kl0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:13:15:40:7a:5f:ca:ca:bf:9c:79:3c:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=a0df1ad429304c6266e387e37c6404bbb3d33db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:9d:8a:f7:78:be:91:f9:39:fa:25:cf:7f:
fc:09:84:cc:77:e4:b5:1a:d0:8a:cc:95:54:0e:81:
34:33:bc:cb:9a:c1:3a:9a:f1:96:86:af:7f:82:a2:
c0:0a:73:3b:95:cd:30:0b:6b:3e:de:79:6e:e7:9f:
52:03:3c:70:8e:49:89:25:56:78:b0:27:10:a0:c7:
f1:9b:f4:6f:b3:54:64:9b:63:58:ce:fa:b8:34:83:
37:2c:43:a7:fc:d1:e6:fc:8a:18:9d:f3:1b:37:55:
7e:6d:11:ef:fd:84:4a:7c:3c:83:f3:8a:95:62:b2:
45:bc:6f:9d:b3:20:3e:51:d1:13:cb:32:2d:4d:3c:
38:d7:d8:14:97:3d:2e:a7:aa:68:f5:4e:c9:bd:f5:
03:24:b0:24:06:15:4d:f1:5f:17:4f:63:9f:1f:0e:
bd:6a:28:21:9f:cc:35:d6:95:21:6a:19:2c:a8:c5:
cf:19:f2:9b:c6:3d:a3:a5:43:24:65:c0:a3:da:70:
d7:34:8d:1f:8b:c7:fa:42:06:7a:4d:59:ba:6e:8b:
be:79:5a:10:1e:8b:9e:31:43:35:f5:b2:14:6b:01:
53:2b:6d:8b:4c:be:83:49:a8:a7:5c:e8:a5:1c:f0:
c6:0d:ad:2c:b4:38:14:f0:31:28:ff:ab:e0:36:7a:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DF:1A:D4:29:30:4C:62:66:E3:87:E3:7C:64:04:BB:B3:D3:3D:B3
X509v3 Authority Key Identifier:
keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:3b:aa:8c:75:c5:0d:b2:8f:06:42:e1:5f:e2:ad:1e:8a:ce:
ff:56:7f:99:66:21:05:60:e1:00:70:f0:95:5e:16:84:0c:ba:
b5:5b:b9:00:45:5b:7f:34:1c:e2:db:94:c1:0a:e4:a5:06:a3:
d5:a1:a2:1f:9f:de:0b:ed:31:b7:35:9a:bd:78:1b:62:97:e3:
32:f3:91:ef:c1:2f:62:42:b9:db:a1:3a:7d:66:13:ff:6a:2b:
99:77:c6:ac:d1:66:4b:7d:04:98:72:50:13:0c:9f:60:d3:e0:
00:0b:07:71:9c:59:87:82:0e:b8:e8:cf:21:bf:a4:79:01:a7:
5c:a7:ed:11:ca:dc:79:d5:ca:f6:ae:af:ff:e7:5d:d8:49:0c:
46:96:f9:50:7d:d1:e9:1f:37:aa:1b:89:07:bc:f1:14:eb:03:
3b:35:fd:ae:41:77:9c:07:33:e6:bc:3e:83:fb:fa:9c:a9:26:
dc:ba:87:ca:78:19:60:f2:94:da:99:38:1b:79:d3:8b:d1:52:
fc:ca:e3:ad:5e:02:07:f0:f3:dc:b2:6d:2a:fa:8f:72:7b:b7:
62:7f:22:fd:62:2f:85:05:50:6a:39:b4:f1:a4:56:84:d0:68:
44:cc:d8:5c:bb:33:66:3e:2d:e6:3b:97:d1:67:24:5b:96:05:
17:20:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client