Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: 1F6pA+jVPoZ8zuWP2FOl2TAzQBejDEyY7EVVLjOoJjc=
Subject key identifier: D4:14:7B:1C:CE:E6:CA:0F:00:CE:04:9C:AA:6B:16:E4:71:8F:AD:A3
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 0194BCA98E540B21DFCF01CC1BACD61B3533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 0E9A
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: KSE5zCYtazfTIrg8FCpila6+VQL1kOqeBnNFOE21Hw4=)
2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:54:0b:21:df:cf:01:cc:1b:ac:d6:1b:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=d4147b1ccee6ca0f00ce049caa6b16e4718fada3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:af:3d:ff:be:25:5f:72:db:5f:36:e1:69:
58:35:63:a1:96:9d:98:40:fc:06:a8:fe:dc:2c:b9:
44:97:83:ab:f2:32:14:7c:43:0b:a3:1d:4e:85:eb:
57:c6:d3:f2:e7:e6:80:37:26:4f:06:75:5b:11:66:
29:cd:f5:38:3b:be:9b:30:46:a2:cb:eb:e9:d3:27:
e4:4e:c0:ee:89:f5:1d:71:8d:72:b9:eb:c9:f1:91:
ff:d0:61:2d:2d:b4:c4:e2:8d:e7:07:93:0f:e7:af:
04:60:ac:6e:f9:da:90:9e:66:54:d7:04:f6:20:05:
fc:be:9a:61:be:e5:b3:ee:0f:27:2a:17:97:e7:80:
05:8c:7d:4c:a3:93:88:bc:0c:24:43:bc:ac:3d:00:
c7:11:ea:c3:35:6c:3c:3f:a7:7d:4a:96:37:13:04:
d2:2a:71:5f:a9:c6:17:c5:ee:46:7a:86:87:3c:db:
80:c1:23:27:06:86:f6:16:e3:73:c0:3e:18:2a:37:
5a:eb:fd:7c:f9:b2:ec:47:cf:cd:24:b4:19:ba:23:
4d:ee:93:e5:6d:07:27:e7:fe:38:3a:7a:3d:18:a3:
98:14:60:44:17:4b:76:47:d3:74:05:78:2e:8d:22:
eb:22:da:5f:07:18:da:f6:8a:24:3b:97:fb:a1:e2:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:7B:1C:CE:E6:CA:0F:00:CE:04:9C:AA:6B:16:E4:71:8F:AD:A3
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:63:5e:6d:07:d4:e2:77:9b:1a:fd:65:fa:fb:11:d0:6b:
ef:2b:fd:34:9a:36:f2:1f:4d:47:d4:c5:b0:26:75:1a:b9:dd:
98:6a:bd:53:f6:b0:b1:88:38:35:bc:f4:92:67:85:2f:81:be:
8b:2c:ae:c1:8a:e0:ac:34:81:7f:90:a4:a2:5c:c1:69:b8:76:
35:5f:b6:42:b2:73:e0:cf:fb:44:b1:54:5f:84:23:dc:ba:8f:
bb:9f:95:b8:ae:38:0d:50:84:7a:f8:ae:cd:c0:20:05:fb:1c:
53:75:64:29:bb:71:a9:9e:45:02:c7:92:8f:f5:57:cf:76:87:
ec:01:05:e5:c7:1c:9a:af:62:f9:0a:56:3c:e7:78:30:c4:52:
50:bf:0e:bf:ca:4e:2a:99:d7:83:81:b7:6f:39:61:38:da:55:
f1:0d:a9:1f:20:bc:a9:b4:f8:21:83:11:97:d8:59:ce:47:b5:
8a:8e:ff:ed:7f:a7:36:62:13:76:60:dd:d3:15:8f:60:b5:35:
06:b9:36:c6:6c:e8:6c:cd:33:2f:a0:68:8b:a6:13:ae:b1:ff:
2b:45:3c:87:c2:40:96:93:f2:c4:e7:f5:37:64:d8:bd:a3:7a:
45:96:e0:35:9b:63:17:d8:e4:a9:f4:16:48:05:17:be:43:2a:
ed:28:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:18 2025 by rpki-client