Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
File: aZISXj1TzEgTNhBUg_z_cB_aG7M.mft (raw, json)
Hash identifier: a2a77blD2wat5uNotKrHy+qq45OWlKLCJ5/AF1Qd+o4=
Subject key identifier: 93:67:64:AD:94:53:13:D0:A1:4C:D5:B5:86:5F:6A:B9:A6:0D:67:21
Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3
Certificate serial: 0194BD857B20C5BCE372B5C54FF6499ACAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: JsN1D5OuopYHCLFIEZKZ2Itv5Oc.roa (hash: VDHMrvw/Ab+Op1OiM6hZje7T+CuOROPSPcHkZG8rfgU=)
2: aZISXj1TzEgTNhBUg_z_cB_aG7M.crl (hash: Janqe5mml2H3cCqDX0jHjs76GsJcRRzuz/4zABHMoZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7b:20:c5:bc:e3:72:b5:c5:4f:f6:49:9a:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=936764ad945313d0a14cd5b5865f6ab9a60d6721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:bd:f6:45:fd:d5:54:e7:e6:3d:a6:94:10:
c4:a1:db:63:ee:ec:15:a1:b7:12:9e:0c:5c:58:7e:
c9:25:32:6a:1f:e8:f9:52:dc:bb:26:cd:25:09:1a:
c6:eb:62:d0:00:a4:17:ec:79:d4:32:f7:4a:d2:b9:
2f:c7:8d:88:ad:88:d6:22:16:51:f3:2a:04:ff:5a:
87:79:b9:7c:3e:a7:4d:35:5e:80:c2:f6:33:3a:05:
8f:b7:ed:52:94:88:3e:69:82:ba:95:71:3e:ce:af:
d9:ed:5f:89:c4:e5:92:45:3c:fa:98:e0:b1:cf:9a:
a6:d6:6b:9d:61:a1:c7:c2:ba:22:f6:37:a4:35:d1:
ef:f8:2d:aa:39:55:14:bb:7d:d2:31:76:2d:54:df:
1f:83:f2:21:7e:9e:34:30:4f:d6:f2:d3:9f:e4:2e:
6a:2a:dc:16:6f:9c:ff:70:4c:d5:68:45:df:22:a6:
0e:4d:d4:c6:17:f6:3f:9e:d0:9a:19:3d:fb:c7:68:
ca:61:41:82:19:a6:ea:92:5e:20:b4:cc:2c:b2:f3:
b1:f1:80:fc:28:6c:4e:37:5d:e7:4d:6c:13:f9:bb:
44:7c:85:5c:ed:80:f7:3e:ce:6d:18:02:06:5c:c7:
91:00:4c:c1:f0:45:c0:51:1c:e9:47:ca:79:81:5a:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:64:AD:94:53:13:D0:A1:4C:D5:B5:86:5F:6A:B9:A6:0D:67:21
X509v3 Authority Key Identifier:
keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:db:bb:3b:d0:a2:ca:10:c5:30:3e:94:b6:d4:35:95:4c:2b:
06:11:eb:a6:02:34:c0:9a:dc:bc:eb:d3:94:8c:f4:d5:69:22:
80:29:33:d3:43:c2:4a:e3:16:0f:8f:b9:83:8d:6e:39:b7:66:
47:dc:4c:29:1b:9f:d8:25:ea:3a:a1:93:35:33:15:c6:ed:95:
6b:75:6d:62:42:d3:4e:51:0d:8b:41:49:ab:4b:66:31:93:5b:
d2:4f:46:ce:25:7a:1b:40:00:c4:62:44:fb:26:ba:69:7e:7d:
61:51:e8:78:6a:6d:f9:92:2b:68:33:fe:06:81:1c:d9:66:e5:
2a:8b:75:12:33:e1:9f:02:c3:e4:45:f8:a6:e1:e5:bb:e1:e2:
18:e3:dd:f1:97:77:d9:67:af:33:24:27:42:b7:87:d8:64:0c:
9e:5b:4f:4f:3f:bf:29:52:ec:5c:d7:4a:43:20:27:de:4f:16:
37:03:7d:e3:77:72:40:ab:73:6c:3c:9b:ad:1f:5b:5a:f1:37:
9c:fc:49:1b:27:3c:67:fb:42:2c:ba:b1:6f:6f:98:6a:7f:f0:
8e:60:0f:62:2c:97:e9:06:1a:48:ed:f1:29:68:0a:b4:02:9f:
c7:d0:8a:9f:96:64:4e:64:61:8f:f9:03:c7:90:23:7f:f5:71:
7f:d1:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:20 2025 by rpki-client