Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: Y36FpU/q5/g3gOO5HhibtpQ8+2rn5ZOinoI9BQrZlvk=
Subject key identifier: D1:26:51:09:B3:0C:8E:D8:8E:3B:CA:AE:FB:C7:B3:54:21:0C:28:54
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 0194BD17A60761331BD2ADAE5A327A2C0F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0996
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: D75orpoKfXf1RLqKlfPZ8LLZYRPgoIiTc9qTPUNfcBk=)
2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:07:61:33:1b:d2:ad:ae:5a:32:7a:2c:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=d1265109b30c8ed88e3bcaaefbc7b354210c2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:af:e5:d6:9c:c1:ae:71:53:58:f4:5b:27:
ed:af:c5:a5:d5:01:10:93:5a:20:74:f3:ef:95:18:
61:df:3d:81:53:75:ed:09:15:55:1e:10:97:f0:8e:
6b:c6:cf:c7:0d:7c:37:08:3d:58:70:d9:0e:3e:99:
17:d9:36:9b:a5:bb:9a:27:52:f3:b8:8c:61:3f:fd:
8a:9d:0b:b7:55:53:c1:86:e2:72:df:1d:8e:40:9b:
7a:bb:d2:0e:87:e3:81:39:89:93:05:fb:7a:a3:73:
fd:04:01:d8:dc:ef:b4:a0:b5:bf:f6:9b:c2:18:c3:
01:cc:a7:02:58:c0:c6:18:8e:51:a6:ac:96:1a:90:
ac:00:13:e3:da:af:51:53:1d:0d:2b:d8:e3:cf:be:
7d:d4:7c:fa:d6:b1:4a:01:be:63:c1:17:d9:0a:0f:
96:36:96:55:5c:f4:47:34:88:28:a7:b8:d5:e9:63:
65:05:ec:3f:dd:60:5e:ec:b7:0e:cf:df:42:03:68:
04:1a:49:04:a4:74:08:8f:3b:0c:37:88:e7:2b:7c:
f0:43:a2:0c:7d:e0:b0:36:30:19:d0:0e:e1:b6:75:
0f:29:d5:bc:c9:8e:09:fd:09:ec:bc:c1:13:79:01:
62:24:ed:38:3d:04:82:96:08:f9:cc:38:f7:ae:94:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:51:09:B3:0C:8E:D8:8E:3B:CA:AE:FB:C7:B3:54:21:0C:28:54
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:91:56:fc:c0:13:93:6d:cf:67:a7:2b:bd:aa:b7:61:96:
71:46:c3:03:a7:b8:88:6e:b8:f2:d1:e1:f3:25:73:ce:1b:ab:
bf:b3:e1:63:f8:3a:79:74:1e:ad:45:08:b6:57:10:dc:10:01:
8c:f6:60:11:4e:db:5f:b8:42:a3:69:a3:e6:59:e7:69:9e:a0:
2f:e0:70:db:11:d4:0d:12:b7:fe:87:c1:5b:6c:0b:61:78:73:
b1:16:98:33:45:e7:11:a3:34:58:7e:91:6b:79:67:8b:b6:a7:
ad:61:43:4a:67:f5:e7:09:2c:4a:20:01:86:91:92:1d:18:68:
cf:6a:3b:cd:a3:f0:eb:9a:a8:5d:ae:e0:e8:5e:6f:58:23:fc:
9b:72:52:87:e7:0d:c4:56:9f:8e:52:87:4e:cf:bd:22:2e:35:
60:61:4b:2e:07:14:01:e5:0f:2c:a2:56:ad:ec:9c:d4:d8:e8:
b3:34:a2:f5:4e:6f:c5:9f:54:b4:a1:58:f7:07:55:67:0e:d1:
c6:40:f2:50:94:a5:76:33:f0:b5:89:5c:54:d0:63:f9:b6:ba:
0c:e5:df:7d:d7:71:b7:a8:fa:b4:51:6d:98:b2:a3:09:e9:74:
c4:bd:b1:ab:e5:0d:75:5f:87:eb:fb:6c:55:1b:26:d2:fc:e8:
ac:0c:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:40 2025 by rpki-client