Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: RE2PYgoKpbcTPzUFm7u5jKSccUx61H+IBSSF+yLoEBI=
Subject key identifier: 65:E4:6B:C0:02:BB:4A:E2:54:9E:FC:C5:6B:6C:70:B5:20:7B:77:28
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 0194BC3BC21DBC193C44203C38B0FAD7BDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 0428
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: C8VQvbdXFSWxY9cUSyaRplGLG8M.roa (hash: dJ/UlGmOEoPz5t5fntmBN/tksB6x5Nidm+UzZouks14=)
2: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: P1yJLmqtzegwGr4UTRwt1UUL/WO7PzCW8bvvtWnzhs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:1d:bc:19:3c:44:20:3c:38:b0:fa:d7:bd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=65e46bc002bb4ae2549efcc56b6c70b5207b7728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:12:a9:76:c1:8a:7a:be:41:b7:b8:44:39:
a8:9b:9a:51:31:a7:07:6c:05:d5:c0:08:04:e7:ca:
e9:48:22:6c:e8:62:06:f0:f1:f1:90:c9:13:c3:f6:
9f:19:e3:b4:f9:46:ce:91:8a:77:1c:1a:73:5b:76:
79:3c:e4:6d:90:92:00:d8:00:91:ed:12:72:2b:09:
86:a3:36:41:34:a3:d8:d5:40:d5:f8:4c:ba:7c:64:
74:1a:d5:a2:89:5e:0e:fb:89:9e:97:49:cf:e3:9d:
4b:66:2d:00:45:41:62:fa:19:ce:52:2e:db:c3:66:
f0:33:fb:17:62:02:95:49:ab:f6:59:93:72:40:1b:
bd:19:0f:c0:35:f0:92:f9:cc:d5:1f:8f:8c:f0:0c:
ee:b5:a8:8b:ba:69:f2:a1:7e:8d:c2:41:15:2a:5b:
e7:dd:2f:94:d2:7d:1d:2c:25:85:27:17:53:83:b2:
62:2c:1c:9f:bd:0c:c1:54:38:8f:11:62:3c:0e:a6:
f5:64:db:8a:9e:48:d4:db:6b:15:0b:5c:ea:ab:6f:
65:84:20:bf:f3:26:bb:f8:2c:3e:f9:a6:5d:ce:7e:
20:dc:fd:a8:63:7c:1f:8f:4a:9e:94:e1:bb:cf:9c:
cc:91:a7:70:03:7f:fb:50:d8:e5:ad:7f:10:fd:a9:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E4:6B:C0:02:BB:4A:E2:54:9E:FC:C5:6B:6C:70:B5:20:7B:77:28
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:69:4c:53:76:fb:f9:2a:f0:d9:fd:f7:aa:5d:ca:49:9e:0b:
22:6f:3a:37:c1:6a:50:77:92:3a:23:b9:cc:e6:2b:1d:9a:84:
b3:a5:eb:39:ad:bf:4d:68:d9:1c:5b:94:8e:3d:9f:00:79:45:
9d:f6:48:f1:3d:4a:9b:83:3a:4d:1c:c0:d0:13:a5:cb:24:73:
a8:9f:1c:74:09:4a:84:d7:9b:9b:7f:9c:29:a5:2f:e7:9a:a0:
c1:48:1e:28:d4:c7:8c:5e:5e:95:16:66:53:3c:59:36:dd:b5:
35:55:2c:05:1b:b2:40:b9:87:4b:f0:c5:6a:b4:d6:fe:c4:e6:
32:61:ac:64:e9:07:ff:1e:a8:17:8b:7f:08:f6:f9:66:0e:37:
60:62:8a:08:20:3f:6c:ac:d6:42:6f:d0:69:28:d7:31:81:c0:
8b:0f:66:06:4a:e0:24:cf:79:61:38:4c:03:c4:42:2e:3b:08:
fd:23:c3:61:76:b7:f7:ce:d8:12:bb:33:87:77:b0:d7:b6:c1:
99:f3:ae:b5:b4:cb:94:45:cc:f2:a8:80:9c:7d:26:1a:51:27:
ae:b7:6c:a6:39:a8:b9:31:db:5f:15:08:53:76:1c:28:09:6d:
5e:3e:2e:9b:24:d6:d3:44:2f:8a:ac:af:6b:5f:1d:7d:c6:e7:
1b:4a:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:40 2025 by rpki-client