Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
File: AOLDNzGtylfcwzsvuCM_wDiwlek.mft (raw, json)
Hash identifier: OHl8n0g4/WOZlWI54W/nUgvuWrKBr6BApy2AKJCceKw=
Subject key identifier: BF:09:0E:5C:D8:7F:04:1C:7B:EF:C6:76:AF:9C:9F:F7:5B:22:A9:40
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 0194BBCE02FCE4CBDABE7604D1FDBB4B2A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
Manifest number: 0F68
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: AOLDNzGtylfcwzsvuCM_wDiwlek.crl (hash: GkrVRf4lXzOhl61o9A0g5+pmIwNtK/g5uQpcU6eFpQg=)
2: lx4r-_of66D7nj4_JxEX4B7iGSo.roa (hash: nBmUpTvMg37xBiu7Iw7rIz0CmSBaScYekCzZq9oCvAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:fc:e4:cb:da:be:76:04:d1:fd:bb:4b:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=bf090e5cd87f041c7befc676af9c9ff75b22a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:64:7c:34:f8:56:1b:af:84:36:ae:7d:b4:
5f:5d:aa:8f:d0:c8:83:cc:eb:88:65:2c:88:94:00:
a6:b0:de:02:3f:a5:51:c9:41:e9:f4:5f:9f:bf:8c:
15:f7:94:45:4a:aa:2d:bc:71:a0:b1:05:72:28:c4:
7c:47:ec:ef:85:0b:b6:31:83:c2:82:91:7b:9e:cb:
9d:08:26:83:88:e0:ab:85:2c:1d:58:b5:88:bb:d9:
15:1e:5d:fc:e9:37:ce:c2:a1:1f:ba:91:99:24:46:
e3:de:8d:a1:0c:50:0b:8f:9a:2a:70:d3:71:4f:d0:
cb:75:74:c1:9b:c7:b0:2e:9c:fe:ac:75:79:6c:7d:
60:87:0e:2f:44:08:c8:ca:f8:54:25:28:4c:34:49:
8c:ec:42:d7:99:86:90:6c:50:11:59:fa:40:fc:8b:
32:20:6e:7a:c2:a1:5c:14:2c:5a:88:06:6e:ff:3c:
54:ff:5b:1f:3e:ec:5c:4d:fb:9d:4e:35:c5:da:58:
d4:f3:4f:d0:e7:76:1c:d0:f0:03:e0:86:5b:24:4f:
a3:c7:08:5c:5e:6d:61:9e:7d:9a:d7:38:a1:95:28:
08:d8:61:c4:bc:de:23:26:23:f4:30:f9:09:18:91:
20:4a:92:86:59:8c:54:82:2a:08:b7:c4:e4:8f:9a:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:0E:5C:D8:7F:04:1C:7B:EF:C6:76:AF:9C:9F:F7:5B:22:A9:40
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:09:c6:ed:4f:f6:32:0b:e7:11:4a:db:4f:d1:ba:d8:48:
44:ba:0f:6f:a6:5c:bd:e4:7a:e2:5e:73:f5:6b:1e:18:1b:54:
e2:0a:44:44:63:35:0f:d2:03:75:07:d9:8a:e0:13:cb:b4:01:
23:0d:5f:f2:b7:1e:ac:5e:25:0d:24:eb:ec:ff:59:69:48:67:
72:98:18:0d:de:cb:24:70:c1:49:75:5a:a6:8b:4a:f7:e1:fa:
e1:00:fa:96:0a:eb:63:cd:89:19:0e:68:d7:98:fc:b6:76:f3:
81:77:0a:5c:dd:fa:be:de:6b:6d:88:c3:6b:e0:0e:1b:40:d7:
24:6c:6b:f2:86:6f:8f:0a:5b:82:f8:12:4a:6b:9b:5b:98:4e:
9f:88:34:d2:65:6e:fc:b4:8b:0f:7f:ec:4f:db:7c:89:99:79:
6e:32:4b:b9:52:55:e6:ee:a0:83:06:89:d0:77:cc:2b:55:91:
bf:28:c2:24:92:b1:7a:1c:80:91:db:5f:65:86:80:0e:de:84:
dc:5d:d5:73:50:73:15:5c:60:86:ee:de:04:2e:0d:03:06:8a:
26:99:76:62:6e:de:8d:13:85:b5:83:5d:23:e4:7a:6c:6b:e9:
36:06:74:a3:96:32:18:c3:14:cc:22:7c:6a:72:99:81:7a:03:
9c:a8:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:59 2025 by rpki-client