Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: wHaqN/ziOLZ2n1ApCt0nw40mVnPLCo5n7wtmQVXHRnE=
Subject key identifier: 42:53:82:15:22:53:61:17:7D:83:53:AF:3B:BA:3D:B3:F1:00:F8:11
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 0194BD4E43D7AFCBDDECCE82BCDBCB2A58ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: R/VQqhJO2LdNqDmHSo0rK6g7GP4qie0gMIGpopS2WwE=)
2: s3MszUL2Sssrqjezj_btDkPTmQg.roa (hash: rgkSdfEiUESbKFQA8EcHOyD2UnXv2kAlPQ3EqnLhSNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:d7:af:cb:dd:ec:ce:82:bc:db:cb:2a:58:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=42538215225361177d8353af3bba3db3f100f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:23:f0:82:fd:e7:99:52:6e:c6:23:10:e1:
83:c3:90:49:7f:1d:a1:3f:51:15:57:0b:84:a4:9f:
c7:90:8e:85:42:b2:f4:af:2b:8f:ac:5f:c7:f7:fa:
c2:80:18:ba:38:1f:1b:b9:23:83:fb:bc:86:bb:67:
ad:b5:94:ff:d2:c4:a0:fa:24:06:5d:52:53:ae:b0:
7a:a9:c5:e1:cb:6e:f1:2f:03:79:e0:2d:7a:d4:fb:
3b:d7:d9:e4:47:97:1e:80:d2:d3:fd:41:26:e9:9d:
02:71:65:e0:28:97:a4:8b:e8:63:7b:bb:83:6b:c4:
81:37:98:ab:84:a2:8c:ad:44:9a:7f:a3:ca:7d:b1:
eb:7e:f1:b2:37:dd:34:47:1e:5d:b8:db:01:a1:06:
7d:dc:f7:0f:c4:2c:5c:bf:e4:38:bb:d3:55:ce:0d:
10:04:51:62:ad:8e:72:88:58:13:4c:6a:d6:92:21:
e0:ba:d3:ca:77:0d:87:fa:db:57:b9:98:ba:0a:a8:
99:ed:89:2c:2b:54:24:e7:d1:c4:07:2c:c4:f3:20:
0b:c6:c8:03:db:ee:2c:77:c1:56:ed:b2:fa:53:dd:
1c:4a:29:8a:21:26:f9:45:74:43:56:18:04:2b:d2:
46:2e:be:36:a4:e7:e9:da:1e:67:a4:7f:aa:40:1b:
43:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:82:15:22:53:61:17:7D:83:53:AF:3B:BA:3D:B3:F1:00:F8:11
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:86:12:41:83:ed:3b:13:05:6b:92:55:df:b6:e6:b4:84:87:
5b:4f:60:c3:a1:bd:97:e4:72:b8:6e:c9:13:80:29:7e:a4:8e:
15:9b:51:cf:41:e3:ea:d4:67:a4:1f:5e:9e:0b:6d:92:48:f1:
fe:92:22:04:6e:67:78:d5:09:bf:3a:f3:d3:e1:5f:d2:b3:58:
cc:63:d3:cd:cb:5e:d9:18:63:73:44:4e:77:67:8d:81:a4:06:
0c:d9:f0:a1:28:b5:b5:94:5d:26:23:1b:ba:e5:50:32:57:f9:
d1:a2:d0:89:23:85:f8:2d:a4:50:82:e9:81:e5:6f:64:74:97:
99:33:86:64:aa:3d:e2:51:c1:9b:9b:12:8d:4a:a6:18:4c:4b:
4c:3a:d4:92:a1:46:37:ee:ef:84:5d:02:28:95:aa:ff:5e:38:
9a:dc:7f:85:d0:37:88:10:99:d7:a5:6c:6c:d1:6b:59:76:4a:
eb:ce:cc:aa:94:eb:fe:12:40:5c:4f:e7:6c:e3:6e:ee:5d:cb:
2c:42:fb:b6:15:aa:27:5e:e8:76:c0:4d:b5:6a:f1:99:53:6d:
73:34:22:c8:d6:2a:ad:92:7e:f1:a6:cf:03:03:5b:06:81:16:
e5:83:4e:89:f4:25:51:39:84:aa:c9:f3:10:12:4b:1e:f7:b6:
11:ce:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:36:52 2025 by rpki-client