Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
File: AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft (raw, json)
Hash identifier: O+OmBAI22mnlWH/y6YmFKvZt3J/IEfmd1GmsBqFDcgI=
Subject key identifier: 7D:DE:93:75:36:1A:2E:8A:0C:C9:D7:B8:AC:7C:C8:6E:CA:C4:21:8B
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0194BBCEE14A8099B3E9FA073CB75F7496B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
Manifest number: 0871
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl (hash: t0IxuFsYGLfn9pz87vfPFIZRRTvPfoWOLMB8Z5tTwCA=)
2: HO4rdY3E48qrjdqnzlEZca_Yebs.roa (hash: kWWt5WfRThziurqE+e5TqB208tDWvrvzVmVg4ZHkDjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:4a:80:99:b3:e9:fa:07:3c:b7:5f:74:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=7dde9375361a2e8a0cc9d7b8ac7cc86ecac4218b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:9b:60:6c:e1:b1:bc:fb:b7:01:29:12:4c:
3a:fa:1e:0c:ea:98:4b:60:95:ff:92:70:e1:f1:5f:
7a:99:5b:41:b1:a6:88:45:c6:68:fd:bc:12:c3:ab:
f7:52:75:4d:cb:c6:4f:c7:f9:05:60:b9:14:1a:72:
30:77:ca:71:4a:7a:ea:67:4e:3a:9c:62:a1:31:14:
d0:61:60:72:43:9b:04:27:69:12:7d:87:a2:c4:db:
4f:65:37:0a:bc:59:ad:4e:1a:54:56:43:5e:b5:7a:
bb:00:a3:c4:6e:d8:f0:11:e5:be:d1:20:f5:df:56:
f6:aa:b1:68:ee:a8:df:c5:3b:95:f3:69:c4:e8:ec:
3b:c8:ab:1b:09:9a:0f:9f:e8:35:2e:44:70:57:65:
69:eb:6f:01:24:d3:8a:fb:46:a4:b9:72:f8:38:0e:
3f:91:13:b6:c0:2b:a5:16:98:11:c7:fa:98:77:b6:
6e:16:0e:79:9a:ca:76:c2:9c:58:10:bd:90:64:61:
cc:40:d7:c6:19:a5:63:ea:04:3e:b8:60:46:9f:a0:
55:73:dc:ce:9b:6c:28:8b:38:d6:03:29:79:4d:d3:
5e:83:bd:15:0d:f7:89:0a:9f:ee:a2:ca:ad:29:1a:
24:72:09:f2:3a:d2:93:ab:cf:3d:ab:d7:90:e9:bc:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:93:75:36:1A:2E:8A:0C:C9:D7:B8:AC:7C:C8:6E:CA:C4:21:8B
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f2:20:a1:af:33:03:be:1e:34:c7:7e:78:25:69:b0:9d:8b:
2f:fc:7e:3d:af:75:e5:48:26:97:03:e7:9a:3b:f6:76:63:01:
6f:c3:08:6b:e6:69:6a:0d:cf:9f:bc:57:77:5d:c0:a1:6f:b0:
9a:14:81:25:f6:02:d2:8d:c2:71:b1:79:d3:43:0a:47:8e:b1:
12:bd:4f:1b:a7:8a:bb:55:30:17:af:9a:93:a9:1f:e2:ef:3e:
15:86:3e:ad:1b:5a:0b:1a:75:c2:6c:c6:22:8f:b3:5e:6e:39:
f0:4a:e1:00:64:ba:ff:0b:75:d7:a3:a9:59:49:0d:33:cf:33:
e7:cf:c0:d9:fd:eb:aa:73:d0:41:45:05:ae:3f:02:16:d1:9f:
a3:f8:eb:c1:53:6c:b4:f3:3c:bf:14:45:41:9b:9a:07:aa:64:
d1:7c:02:46:00:04:66:dc:5d:62:42:ab:15:fd:61:a2:70:7e:
02:7a:1a:7a:fe:ce:4c:5d:8a:b9:18:3a:8a:f4:3b:24:77:32:
4f:f1:97:f0:e3:b0:28:4d:be:ef:10:65:5a:6b:f3:71:71:6a:
4a:fc:b7:e3:c6:46:8d:e4:45:37:5b:4f:18:f8:cc:cf:6d:8c:
d1:9a:5e:7d:c7:ab:1b:3a:1b:4d:08:4c:ef:4b:58:c3:8d:1a:
68:80:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client