Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json)
Hash identifier: S6+8ctMXUcvYHrEOlAtjaHrtTOd+vRq/7VInvu2xORY=
Subject key identifier: 60:08:C3:C0:65:66:6F:6A:5C:7C:06:03:F9:E8:37:A4:98:B6:74:E5
Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Certificate serial: 0194BBCEE0A9FD930A792AA5F1D4444CE8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
Manifest number: 1130
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: hthvLGZbs5g7WmVoouo9UpiStAo5Ybq9i/5ssYtsEuc=)
2: C8VNDT0eLyU6a-BGSaat20kBt5Q.roa (hash: GVJtrMJUvAX+z3Z9hhGqUx0RMXPQ0og215klHN94fVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:a9:fd:93:0a:79:2a:a5:f1:d4:44:4c:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=6008c3c065666f6a5c7c0603f9e837a498b674e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:43:21:88:73:00:6e:38:f4:b4:d2:99:98:
98:49:65:b7:b6:81:13:36:41:0d:5e:b6:79:28:0e:
31:6d:83:aa:98:92:8e:89:d4:1f:74:4e:5b:5a:33:
26:e9:0b:f4:8e:58:ab:c9:24:ea:42:07:bb:c2:6a:
5a:2d:8c:95:7f:ee:14:75:55:87:35:00:93:8e:50:
cd:d6:e0:a0:a9:f9:6d:b5:a7:34:44:cd:45:8a:1a:
2b:b1:29:1a:65:ee:08:26:9d:a6:26:a0:56:21:e5:
53:0b:da:be:56:3f:cd:d5:b7:76:f5:29:81:36:60:
38:0b:6a:30:a5:6e:b0:da:6f:5a:9f:9a:df:5d:a3:
d0:c4:17:5a:24:9e:7e:62:7e:1e:7a:81:2e:c4:da:
78:62:5d:16:93:c7:c8:56:3c:7a:ff:f0:eb:e5:d2:
cd:c2:fb:b9:fc:1f:11:48:53:a8:38:4d:52:0d:24:
49:6e:f2:d8:b2:b7:88:99:71:bf:c6:b5:6c:29:46:
03:84:f6:c7:b3:6c:02:19:bf:ae:d8:8f:f1:92:39:
45:78:f3:a9:c5:95:51:a8:a8:9d:f5:35:e1:38:b8:
c5:95:25:ac:8f:68:28:27:9a:53:4a:f3:4d:95:41:
a9:db:69:2e:c4:8a:0e:2e:dc:0e:2e:63:59:f5:d0:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:C3:C0:65:66:6F:6A:5C:7C:06:03:F9:E8:37:A4:98:B6:74:E5
X509v3 Authority Key Identifier:
keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:0c:f2:c2:46:89:ef:bd:7a:d3:6b:55:86:6f:e8:73:a5:
28:14:9c:66:f3:bc:89:26:ed:20:f6:59:87:46:29:73:ab:f8:
de:e4:3c:c1:8b:ea:3c:83:5a:3e:9c:fd:8f:9e:8f:54:d7:72:
6f:68:2e:6d:e9:7f:87:95:66:98:b9:ae:ea:7f:62:31:c3:bd:
84:32:2e:c7:ac:70:7e:08:d3:ac:e4:de:9d:0e:56:b7:f9:04:
13:6f:d4:f4:77:f9:e6:46:16:63:25:a8:b2:fc:99:08:70:3d:
2b:39:c0:96:2e:09:ed:90:b2:b1:ba:88:4f:62:7b:9c:88:83:
ba:f6:e9:e6:7e:f8:2f:bd:5f:5f:2d:6d:23:08:81:c0:f3:16:
82:15:88:00:3b:8f:44:f8:8f:c4:a2:8c:44:79:af:fd:b3:b3:
6d:b9:f7:d3:e5:cf:9a:32:cc:95:69:a6:45:93:5f:11:4c:84:
a8:aa:7e:74:ac:8a:f1:b4:16:cb:56:45:a2:70:d5:b7:6e:4d:
a2:cc:4c:fc:6a:e4:a3:e0:85:2d:4d:52:c5:89:b6:c3:cf:0c:
55:cd:1b:94:78:50:63:64:8f:01:60:57:bb:b2:61:6b:f9:18:
fe:06:3b:60:49:e2:3e:aa:a1:41:d5:41:d6:d2:8e:a6:f0:b6:
53:0b:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:05 2025 by rpki-client