Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: YHEYaFicAIxOltwgZwYZB2sz9eO0Qk4d3uh/AHjjbY0=
Subject key identifier: EE:45:B9:0F:30:49:CD:6B:68:24:F5:FF:BE:DB:C6:D3:36:20:C9:B9
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 0194BC3BD8C0A3563A0AC2BDD87AA8F1A6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: 1pAR5TCLZg5uyU/0XOakX6AZ9ijVUibn/icFeSqRdDE=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:c0:a3:56:3a:0a:c2:bd:d8:7a:a8:f1:a6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=ee45b90f3049cd6b6824f5ffbedbc6d33620c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:50:da:e2:3c:bd:45:e5:d2:ed:69:b3:bb:
f3:cf:50:ee:4c:b4:bf:ae:f6:29:1a:ba:24:75:ba:
70:e7:43:84:76:c0:be:d7:18:81:d3:60:88:2d:64:
51:d1:d0:ea:b4:65:e7:b0:cb:a8:53:cf:10:86:33:
32:ee:fd:1d:2e:52:86:c5:9a:c2:9c:37:1a:6b:ea:
18:0d:63:41:b3:09:53:d6:0a:40:c9:7a:93:9b:0e:
ea:94:6c:61:02:de:ce:9a:13:66:f5:e7:85:ba:65:
66:64:8e:f3:36:a8:47:8d:d9:2c:69:ba:84:8a:ef:
6e:78:36:0c:82:7d:8f:77:0c:29:d9:aa:3c:60:df:
72:8a:9d:1e:61:82:08:a3:62:b5:58:1b:4d:8b:66:
e2:72:a3:3b:f4:35:f6:7b:23:20:06:b8:26:8f:8b:
f4:2a:df:3d:d2:ec:cc:f3:71:ee:e7:b4:62:dc:05:
ba:10:ad:8e:50:2a:de:c1:34:ef:f1:99:d1:7d:f7:
b2:3f:40:b0:ad:b7:ce:d1:31:2a:6a:06:bd:a6:92:
36:49:27:ca:d0:fc:48:2f:c5:83:70:c8:a8:74:77:
73:50:67:32:8c:71:8f:5d:34:2c:95:b8:5c:1e:0d:
db:51:72:ef:49:99:29:7a:70:7c:eb:d8:0e:fb:c1:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:B9:0F:30:49:CD:6B:68:24:F5:FF:BE:DB:C6:D3:36:20:C9:B9
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3f:b4:9f:c7:e2:8c:70:1d:88:bc:a8:c8:40:4d:36:de:7b:
75:e4:8f:24:40:f7:51:e6:35:c6:a9:99:35:1e:c2:40:56:46:
77:de:6d:e4:98:5f:33:d4:9d:3a:bb:6e:ba:19:b6:33:e6:a5:
06:78:98:87:0c:9a:d7:30:68:dd:fe:e7:9d:1a:5a:52:fa:cf:
ae:64:ce:2f:87:f5:da:02:4c:aa:60:39:f8:85:7b:de:bc:56:
5d:97:2e:87:9c:e8:7b:8b:27:e4:89:c5:91:e6:ec:06:c0:01:
41:29:f0:77:7d:77:19:4e:2b:e8:4d:0a:58:27:1e:38:c9:7d:
33:45:09:39:97:4c:d1:5c:ee:e7:d5:dc:6f:cc:0b:c5:29:e8:
c5:79:5f:36:35:4c:15:f3:cc:5e:fe:cb:fe:94:8d:f3:ef:58:
09:2f:be:b2:0c:09:38:d7:f1:b8:a2:44:d4:df:1b:16:34:e4:
0d:25:ef:67:fa:18:73:bf:9e:02:5b:b3:42:2e:41:ab:c4:e6:
07:93:ab:34:df:91:5b:4b:7c:62:7f:9c:9a:0d:4d:67:90:85:
36:6b:9b:bb:78:b2:5e:f0:cf:60:4b:7f:f5:2c:7e:db:de:51:
c0:24:45:ec:76:f6:2a:ee:d1:bf:f2:a2:28:21:7a:a5:42:bb:
30:da:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:18 2025 by rpki-client