Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: zoAFhHtG16BIEWskGI+Rv2r5RTWyV+fo9j2miK1q9jc=
Subject key identifier: BD:CD:91:3B:A7:05:A5:BE:09:F6:11:61:1C:D6:BC:D4:3C:EE:EE:C3
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 0194BC04FC2A255BE6947ACF2C5558820AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: G5QCQaqfKvwwqzVwxb1YHkvL2yV30sOukbDjR0jRDzY=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:2a:25:5b:e6:94:7a:cf:2c:55:58:82:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=bdcd913ba705a5be09f611611cd6bcd43ceeeec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:54:c6:09:4d:45:42:00:a7:bc:a6:46:10:
61:3e:da:3c:3d:e9:80:95:c0:61:f9:13:6d:6b:55:
3c:12:70:d2:b8:4c:aa:82:6e:c7:7f:24:38:dc:8f:
14:a1:e2:95:cc:f7:b6:15:c9:b6:8e:b5:29:82:3b:
94:4c:0e:90:00:e7:af:84:73:c9:73:4d:56:73:8a:
25:14:e5:a0:b7:af:19:c7:90:75:67:9a:2a:6f:47:
ae:10:53:00:56:41:df:97:06:66:c1:37:4d:65:0c:
c2:49:1c:3b:66:d3:ed:af:ff:b6:09:0e:96:aa:93:
e2:48:bf:ba:a9:15:e1:e1:06:f8:d0:c0:7c:5b:e1:
1e:20:48:57:58:df:d3:cb:79:9c:de:bf:a2:16:39:
37:5d:65:41:55:1b:9d:c8:cb:08:8b:c8:9f:6a:99:
97:79:17:fd:61:52:1a:fc:fa:85:8a:60:8f:b8:5a:
ad:a4:79:ff:97:70:92:18:45:ae:2e:15:4b:08:e9:
ff:09:cb:dd:74:b0:df:bb:cc:1d:bf:d1:87:a9:74:
bc:66:e8:33:12:6e:73:b1:91:74:bf:de:7b:64:b3:
a8:dd:f4:7b:c0:79:af:07:78:0d:5d:a8:4a:5a:3a:
4b:12:16:24:8f:23:68:ec:4a:a9:02:3a:62:3a:bd:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:91:3B:A7:05:A5:BE:09:F6:11:61:1C:D6:BC:D4:3C:EE:EE:C3
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:eb:f8:e5:17:0f:51:2d:f2:fa:07:b6:76:46:2b:f1:19:
4d:f7:0f:78:e9:3e:92:10:13:25:40:0a:31:df:39:cb:38:5b:
34:70:f7:3c:7f:d4:c9:bc:6c:8d:7c:be:ed:fc:a7:5d:cd:fe:
b6:fc:96:aa:f9:24:b1:92:eb:72:53:f4:ff:64:ce:fa:3b:fe:
67:ea:b2:2b:c3:e6:c0:f3:d4:39:24:47:a7:6a:77:ee:c8:4c:
39:a0:a9:8c:c0:84:e1:d5:c5:0b:af:96:39:f4:6f:84:38:e4:
08:d4:d3:53:fa:d8:b9:45:c7:06:1f:aa:ee:ca:f2:23:59:f6:
04:c9:32:3c:37:a1:d7:d2:bd:5d:cf:9c:cd:7a:ee:55:d6:f0:
e2:d0:be:b0:18:38:ee:f3:e4:32:17:e5:79:c6:b4:98:9c:fc:
84:30:aa:f8:de:64:9e:97:c2:0a:72:c0:0f:02:86:60:a7:49:
c3:12:e7:7e:9d:04:04:c9:29:fd:6e:e3:5c:e6:df:dd:d9:51:
b7:cd:11:72:6f:4a:b5:a0:c9:0e:16:99:0d:5c:b2:2d:fc:54:
04:2d:54:24:fc:6f:12:be:a3:4b:5f:45:33:df:76:65:e1:8a:
8d:7c:ee:99:e6:9e:a4:59:94:e1:24:b3:fd:a5:12:59:0a:0c:
0b:01:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:47 2025 by rpki-client