Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File: agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier: gKElpCcpXtM3md/Yh4tY/AoahX+Ug+xkXf4VVEaUYeI=
Subject key identifier: 2D:2E:43:12:A4:A4:06:9C:04:43:DD:10:3A:37:08:91:7B:D2:11:8C
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer: /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial: 0194BC051D7B7DDB16D5BFADCA352BC85315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number: 0624
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 2vSSEUGyoECcbr-T4y2ubbHraKg.roa (hash: B7WLa2ysTg94FsBb1jS1WwKUUvVr7kQqcY57g1dK/4s=)
2: agPhC26juPNiz7I671icd3cefso.crl (hash: EnkjXo8hBOU36pAziBaOH4uKPeF/Oew5ZE8TN88SPZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:7b:7d:db:16:d5:bf:ad:ca:35:2b:c8:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=2d2e4312a4a4069c0443dd103a3708917bd2118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:25:bd:4d:82:64:42:87:ab:40:0e:2e:83:
5e:20:41:83:79:e6:bb:db:aa:ab:d6:e9:15:6e:14:
a9:b1:fb:56:b0:e1:6c:b9:a5:f0:34:86:eb:8d:28:
c6:99:87:e4:48:3c:6d:e8:d8:87:e0:ab:bb:14:dd:
3b:cf:72:5c:b5:40:57:bc:7b:d8:d2:d1:f9:db:ab:
9f:14:2b:f1:e9:36:c0:28:53:3d:ec:47:91:b3:5d:
d5:58:50:3f:83:4c:eb:20:9e:90:16:b4:7f:e5:98:
69:39:3d:0b:4d:10:43:f5:a7:34:f9:2f:9e:da:f5:
5b:bc:1a:d9:2c:bf:78:53:86:cf:02:3d:9a:c6:56:
c0:7f:fc:1c:3f:c9:bd:18:0b:35:da:af:17:e2:03:
ee:4e:df:95:ed:82:84:51:ef:3e:a0:ed:7a:81:0a:
82:29:5e:4b:88:47:02:7a:ac:25:7f:b1:ef:b6:1c:
df:a6:a5:f1:ec:d2:74:2c:24:bd:ce:1c:0c:d9:65:
56:a6:8b:08:f6:6e:e6:f1:2d:23:47:c9:9c:56:54:
ff:81:35:7a:8e:79:c7:65:24:72:74:28:2b:ee:d0:
e5:77:b8:83:cd:34:d3:39:a8:6d:a0:d1:f1:b5:96:
60:e7:fc:71:c0:c4:20:4e:29:29:99:43:b1:70:8c:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:43:12:A4:A4:06:9C:04:43:DD:10:3A:37:08:91:7B:D2:11:8C
X509v3 Authority Key Identifier:
keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:b0:fc:78:b5:fd:b1:6b:38:a5:bd:51:47:cf:4a:c9:84:
52:16:e3:e1:a8:d3:7e:60:f1:2c:29:03:42:04:05:2c:4b:ca:
d5:86:e9:0e:93:0d:c8:80:6a:f3:89:cd:87:e1:aa:27:18:65:
87:e7:ca:0b:45:58:e1:01:61:cb:50:21:fd:cf:0b:5b:ac:27:
93:69:72:31:6c:c9:a3:79:08:fa:d1:22:b2:06:4c:30:9c:49:
69:02:b2:3a:e4:8c:2d:09:6b:b3:96:28:73:12:cc:2d:49:02:
b0:9b:2c:a5:46:d7:ed:fa:7b:2c:75:56:2f:05:44:ff:1f:95:
78:fa:e3:96:2a:21:3b:54:d6:26:90:06:64:74:5d:3a:3c:fb:
28:a9:28:89:eb:b5:14:b0:a1:d0:6e:8e:e7:ae:46:49:74:0d:
5d:9b:5e:bb:a8:e0:ef:03:a1:2b:9a:40:9f:e1:77:82:b1:15:
a1:3c:7f:aa:d9:84:0a:98:e8:8f:3f:95:9d:86:b3:08:d6:4c:
de:e0:26:32:dd:06:45:3e:23:e0:3f:92:a5:e4:f0:5d:04:20:
f4:72:e5:7c:42:cf:3a:7a:06:8f:24:bc:c4:0e:4b:b4:34:05:
26:b6:7f:0c:68:1e:27:7f:5a:fd:2a:03:20:58:c0:01:a9:17:
a3:87:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:58 2025 by rpki-client