Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File: paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier: 12G3SRe2AJvET+rjwTt4Mg+uGqgmV0nTY6hKhEvsh0Q=
Subject key identifier: B9:EC:32:DE:D4:A9:73:93:67:A8:80:AB:26:22:A3:92:A4:6D:9B:54
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 0194BCE09F23BAB74D1170270502AD6C5486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number: 0512
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: WZ92TPSlqkUXzXeggDDa7+yDJ7R7gTEZK6AkseEE/Ks=)
2: rwfPHgI2-DSJUQ0hnplUUUwXZYA.roa (hash: 3rwqzvqdxseMkdjkkd+tuvlSe+1629JshgefbvDP6/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9f:23:ba:b7:4d:11:70:27:05:02:ad:6c:54:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=b9ec32ded4a9739367a880ab2622a392a46d9b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:7d:42:6e:9d:ca:39:1e:8e:0a:40:45:b1:
3f:d4:8d:19:12:04:49:76:87:5c:c0:11:46:86:ed:
97:9e:d8:a2:60:f3:5e:9a:fc:a7:8a:ed:7c:b7:fb:
46:b6:96:2a:ee:78:5c:30:c4:72:4c:79:b4:43:57:
7f:ee:23:76:a7:14:4f:3f:35:50:51:85:42:24:31:
25:ef:83:e8:9d:eb:11:fb:48:f7:3f:f9:9e:a9:c1:
c5:d3:ea:71:8b:01:c4:94:62:54:c4:aa:50:8d:aa:
cb:cf:45:c3:b1:d0:6e:ff:c5:d0:c6:96:65:49:d2:
9d:b0:3d:49:bc:38:b1:ad:f2:8e:a7:16:ec:58:d3:
b6:cd:a2:81:a7:64:5d:de:75:6d:2b:77:8b:5d:49:
1b:97:f5:aa:ac:1c:90:f1:f1:bb:54:31:b2:f0:f6:
74:af:3f:0a:17:e0:34:ca:3d:a3:70:eb:87:b9:27:
26:fe:af:2e:d4:1f:ba:19:b6:7c:75:1c:a3:50:dd:
88:d0:39:60:3f:da:08:1b:3c:6f:0e:27:82:f6:d1:
10:d6:24:05:1b:77:2d:be:3e:cd:cf:0d:b1:03:6f:
cf:a5:d8:8d:57:ab:9a:8b:a0:4f:54:c2:88:39:b0:
5b:6c:07:18:af:68:62:fa:82:cd:f8:29:09:74:cf:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:32:DE:D4:A9:73:93:67:A8:80:AB:26:22:A3:92:A4:6D:9B:54
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:81:c3:d1:98:46:0e:de:30:58:33:9d:ec:37:b4:7e:78:
b0:bd:5a:63:51:4d:99:53:c8:24:c4:2a:b4:2f:7a:64:38:9a:
ef:46:a7:f3:19:87:6d:fe:39:f1:09:98:f8:20:15:88:39:14:
84:f6:80:e9:2c:f9:f0:c4:aa:a4:ba:a9:ec:df:00:37:dc:2e:
1a:6e:ba:39:d5:18:6d:ef:4a:6d:36:83:92:83:b3:e5:fc:56:
6f:ff:c3:72:7d:93:6c:43:19:bd:e2:da:bc:8e:b9:c4:47:ca:
90:97:2c:15:b9:16:e8:ff:65:8e:5f:81:e3:f9:84:61:5e:38:
5f:40:23:5f:71:54:39:33:6b:c0:6e:5c:7a:9b:1a:89:02:ba:
bc:5b:99:95:a0:8a:98:8d:79:b3:cd:f4:66:24:5d:c0:09:01:
e0:7b:2c:85:16:4d:85:31:50:3b:1e:f4:0f:79:94:22:d3:14:
35:5e:07:48:25:46:83:c0:8e:ad:2b:83:12:90:66:80:fb:c0:
85:17:a6:b1:e3:e6:0b:11:9a:e9:ef:26:9e:d4:d5:f8:8e:16:
29:6b:09:df:92:3a:d8:61:2a:f4:83:10:02:27:68:e1:5b:66:
9c:38:f6:db:c3:bb:e9:8d:7f:25:63:b5:cb:85:86:12:ed:1f:
ce:25:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client