Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: ripNE2/djhJfkw5rzWHc1xU/w62lvHPVeifawKOLqM8=
Subject key identifier: 0E:F3:7E:75:96:9A:F9:25:09:8D:55:FD:24:92:3C:5C:E4:99:DE:B0
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 0194BD178B4A451709A4A7DE93AC7151A686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 6dsNgWISw+ER4MrjwRMnhDNg2ew+WkCI+oQVPlFxkNo=)
2: dZX-Kvgl9o6BfgDGAkWUKr6z6So.roa (hash: pk+V195UpaNyzxBRisHlqyHLbz6AqZTl0n9ayxOtcCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:4a:45:17:09:a4:a7:de:93:ac:71:51:a6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=0ef37e75969af925098d55fd24923c5ce499deb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:64:c5:1d:ee:ef:3d:8a:c8:1a:d3:05:15:
e6:cb:5e:e0:1f:06:12:d0:08:b4:4a:44:e9:ba:df:
fd:77:e0:a5:cb:60:33:fa:89:0c:75:0f:88:35:74:
11:e9:cb:2e:a7:a8:ce:28:f0:b1:d4:01:80:35:2c:
2e:95:ed:cc:a9:24:ef:b7:01:51:44:16:a5:e6:f8:
72:e5:c2:fb:e8:71:a3:6f:85:08:27:b5:a1:48:8d:
3a:8a:25:70:de:b3:b9:94:75:fd:f2:a6:05:cd:db:
59:ed:ca:dd:8e:bd:15:a7:78:4e:c2:9f:05:b4:ef:
07:30:da:99:e6:51:ad:c3:08:59:a0:46:13:cf:54:
48:a7:43:0a:50:6c:af:71:90:f3:af:a0:76:56:83:
bb:23:46:86:33:10:02:72:b2:6c:05:23:61:a2:55:
1b:9b:13:c3:60:3c:86:16:0e:cb:c9:f5:f4:87:47:
24:42:dd:47:a9:50:36:0f:83:72:1b:ec:a4:77:3f:
f9:8b:2f:c0:43:e0:48:5b:88:7a:67:f7:b1:09:ab:
cc:d8:bf:32:92:ca:61:3b:d4:3f:f2:e3:c3:cf:93:
e1:68:7e:3d:4b:a3:08:23:59:e1:e8:c5:69:18:dc:
6a:b3:c3:b8:bf:8e:18:3e:4f:4a:6b:f5:59:55:6b:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:7E:75:96:9A:F9:25:09:8D:55:FD:24:92:3C:5C:E4:99:DE:B0
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:30:a1:89:d5:d1:42:61:fd:c4:71:3e:ed:7a:57:5e:78:ce:
cc:e1:06:98:86:6d:8e:a7:63:4c:e7:28:cb:5f:61:c6:07:85:
f1:f2:ee:29:a9:95:fb:e0:52:63:bd:03:a2:8d:2e:d4:19:d9:
a1:5a:08:6f:80:d7:8b:bb:5b:db:44:db:b8:a7:50:a1:a5:e7:
40:8b:37:3f:95:1e:e9:39:ca:aa:70:d0:23:d4:37:f6:0c:aa:
04:04:ce:62:75:87:8a:24:62:fe:94:7e:d0:7d:54:bd:cf:a1:
f8:ff:0f:f8:da:de:3e:43:29:dd:ae:0e:60:8c:a3:26:36:b1:
e5:50:f5:1f:3d:11:9b:08:b5:c0:74:ef:08:1d:cb:67:83:92:
11:63:d0:d3:75:cc:ae:55:cb:98:24:f1:14:43:78:59:73:46:
5c:5d:ff:fc:58:14:56:15:01:15:71:5c:b9:19:ff:00:b9:14:
15:14:0f:58:39:20:cb:3c:fb:7f:7e:60:dd:86:7e:6c:a5:66:
00:c4:2f:36:71:0c:6a:17:b2:8a:fd:cb:9b:43:46:4e:36:32:
97:e5:21:04:19:0c:1f:fa:1b:eb:ca:89:88:f2:1e:e4:1c:55:
18:a0:39:49:7b:83:a2:1f:d7:6e:ed:1a:d8:b1:c1:4d:37:8e:
18:a9:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:16 2025 by rpki-client