Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: MaeBU4ge6inXvDnPgqVNPET0Euey5K3v9SrJU99rG3I=
Subject key identifier: 3B:17:F8:D1:0A:29:3A:D1:23:33:39:8A:A4:B4:11:F5:51:F0:4F:58
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 0194BC3C86E9B6160B2612D8C8E2522160D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: QAT1oZY46mRh_Fkt_3bUQBsKciY.roa (hash: v1kLAdD0EULrc6Qb8tMAZUP3cjIiEukJVFTk17Z6lW8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: 5CkyDUPZlioHgVXm6lXDQyFA86BvV/peebA2Lf1khJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:e9:b6:16:0b:26:12:d8:c8:e2:52:21:60:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=3b17f8d10a293ad12333398aa4b411f551f04f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:63:f3:7a:02:64:6c:2e:2d:51:05:f9:fb:
82:10:fc:9c:e8:42:e1:88:e7:2e:d2:d6:fa:1e:38:
7a:d6:de:12:5a:6b:d8:11:d6:79:98:49:93:04:d9:
bc:20:9c:14:c8:4c:0f:fd:6d:98:31:f5:21:be:d8:
ea:b1:e2:8f:53:56:cc:4b:7c:92:3c:b6:56:b7:2d:
68:bb:4f:2d:ad:7c:0d:6c:60:52:b4:9c:8e:b2:64:
ec:54:50:ec:48:bc:dc:9b:ec:6c:48:c5:20:26:61:
ae:ae:7b:16:e2:b7:db:06:ba:7c:57:9d:21:b6:8b:
5c:8c:19:26:0d:6f:ba:00:e3:a6:66:c6:ce:9c:92:
96:6e:f1:61:dc:67:bb:10:32:46:d9:ad:35:98:99:
ec:83:0f:3c:44:66:7c:19:dc:c9:5f:cb:22:e7:bf:
35:8e:62:ee:22:c2:cb:21:87:68:48:2d:28:f4:74:
0c:a7:67:39:ff:c2:57:dc:d9:e1:7b:c4:be:8f:52:
9d:50:4c:c8:aa:85:40:ce:04:d2:ef:7f:4f:92:be:
58:96:40:c5:7f:b5:bb:97:03:86:28:fa:f4:e6:75:
54:0c:0c:72:3f:e9:95:9b:d6:11:c7:6b:72:cd:84:
49:71:df:b7:86:31:29:64:93:41:53:53:f3:2b:00:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:F8:D1:0A:29:3A:D1:23:33:39:8A:A4:B4:11:F5:51:F0:4F:58
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:73:7b:33:24:fc:e7:52:33:b3:d7:06:04:c1:32:42:14:ef:
b7:d4:45:ef:56:36:45:54:a9:3a:8c:1d:10:34:58:44:86:ea:
c9:ad:62:7e:55:4f:3a:60:a4:f4:58:26:e4:6b:7b:5f:9a:6b:
8f:62:3c:df:8e:a7:ee:1f:6d:b1:a2:a3:c6:bc:11:5d:9f:71:
13:19:15:91:5b:ef:40:df:c8:8b:47:d6:bd:c3:4d:7d:73:08:
eb:37:cf:1e:c6:10:c1:3b:3e:52:6d:ce:27:26:08:71:4e:49:
2c:bb:8b:8a:74:5f:3e:85:d0:d2:28:c4:4d:60:ca:78:f1:cf:
4e:db:fa:3b:7f:7d:77:92:35:b3:d6:ad:24:0d:b6:98:52:e6:
48:19:6e:22:27:50:5d:6e:9c:8e:af:99:f9:c5:b1:2f:15:ec:
1c:80:8c:f2:74:80:8a:df:54:68:d9:48:c2:9c:c6:55:1c:dd:
1c:79:f7:ea:62:76:c0:8d:a6:0d:b7:c8:07:fc:ae:e0:64:6b:
6d:ce:a5:a6:33:13:c2:3d:fa:44:21:fd:5b:c5:17:f3:5b:14:
8b:46:dd:51:0f:40:12:ac:4c:80:33:cf:0f:c0:e4:64:d6:91:
8a:47:a8:b7:b7:1f:31:ff:05:97:5e:43:2f:f6:38:cb:50:6c:
7f:7a:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:19 2025 by rpki-client