Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier: dbNVvvMBMUGx85c0zMwLeWrmixV9W4Hki0SzCtLZrS4=
Subject key identifier: BC:D3:A4:2F:AD:E0:DF:8C:28:CD:34:09:05:6B:00:23:E7:23:69:0D
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 0194BD853C6800A841BC987B2F77FE483A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: yiuSwEUz44YPEHMiaW/zh/BIDjwlbRgjTGi34N1NppE=)
2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:68:00:a8:41:bc:98:7b:2f:77:fe:48:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=bcd3a42fade0df8c28cd3409056b0023e723690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:21:6a:a1:e6:03:a7:c1:3b:e5:37:2a:6b:
40:00:ff:b8:e6:ce:d6:94:4b:0b:ee:c3:f2:1e:43:
0a:ed:76:54:37:cc:11:2c:2e:6b:b8:c0:d7:cf:fb:
4f:12:2e:3d:a6:66:39:28:33:ae:6e:a5:25:9c:57:
7d:b1:6a:62:ab:02:71:2d:58:49:dc:26:f7:74:4d:
56:95:4b:d2:ae:42:d0:90:fc:0f:0b:a0:31:e8:75:
eb:67:47:1d:76:f4:d2:65:c5:85:73:6c:48:28:b7:
c8:5a:19:54:bf:74:7d:b6:1e:16:fa:f5:b4:0c:3d:
d7:73:f0:1f:fc:54:d9:98:d0:54:5d:df:bb:2d:c4:
d7:5b:14:a1:3d:5a:15:93:38:db:a0:fa:d5:ce:1e:
12:1f:47:c1:9b:c3:1a:b8:8e:d2:bd:93:08:64:63:
16:91:51:6e:79:e2:70:91:89:54:02:94:4f:22:4f:
d7:32:a8:ae:c1:df:33:7a:d3:09:76:c1:80:4b:15:
18:41:e2:02:aa:e5:9c:8d:57:c3:72:ca:01:08:ff:
ed:58:9a:2a:bc:c5:b6:4f:b7:d9:2e:ed:f9:38:53:
d0:ba:dc:8c:4d:09:9d:4e:d8:c3:b3:05:22:4f:94:
ed:7b:5c:e8:8e:98:39:74:f9:64:86:4c:30:0a:8d:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:A4:2F:AD:E0:DF:8C:28:CD:34:09:05:6B:00:23:E7:23:69:0D
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:46:63:ff:84:c2:cf:3a:a4:6f:ec:1f:d1:6f:b9:b0:42:
7d:44:3c:54:8f:31:08:9d:62:85:18:0f:fa:ae:ff:6a:c9:b3:
74:e2:36:7e:19:f0:6d:21:ca:7a:0e:c2:54:fc:f3:9d:62:4a:
3c:10:8c:c9:49:ce:57:ca:6b:21:de:9f:3f:72:27:0e:5e:cc:
37:53:7e:a5:f5:63:78:2f:e1:7a:86:16:74:0e:7d:2e:b5:53:
de:ff:23:1f:b7:0c:74:32:8b:1a:1e:b8:50:ec:87:ba:86:ad:
2f:41:b3:6d:51:84:b6:1e:8d:b6:0e:16:bc:cf:8d:14:b8:a4:
be:62:26:4b:a2:64:ca:59:d7:b5:31:c8:44:aa:e8:1e:46:49:
25:11:6a:58:cc:28:53:f0:b0:28:3e:ef:4b:1c:a2:f8:0a:c1:
74:50:dd:13:a0:00:24:21:f7:7a:66:f7:e2:c0:39:a0:90:ea:
90:82:8f:9b:d8:d4:92:f2:6f:7d:94:c0:5d:19:cc:41:0e:99:
05:3e:d7:02:8c:e9:8a:ce:a1:e3:be:c0:ff:93:47:de:3e:c5:
fa:17:b4:4b:04:68:dd:e7:19:fe:cd:6a:f6:17:bb:a7:44:a3:
20:e4:7c:02:58:fb:00:a4:42:26:8c:32:11:d1:65:4c:b9:80:
1e:35:72:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:43 2025 by rpki-client