Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: csDcVFKjtRhyju0WVTdFg/MiGs3w4hziYhjFQXQozoI=
Subject key identifier: AA:DA:06:58:B8:80:C7:4C:F3:61:E4:D6:6C:D4:AE:FF:1E:46:67:FA
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 0194BCA9E58064C2623EE630E958A5E4AA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0368
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: a62huiKTSU3biW2bXbUua2fBsOc8idIcJd5U14tXCQk=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e5:80:64:c2:62:3e:e6:30:e9:58:a5:e4:aa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=aada0658b880c74cf361e4d66cd4aeff1e4667fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:c3:c9:94:63:84:6d:b1:78:08:e3:51:5c:
67:03:14:44:67:45:a0:30:21:77:e9:3e:6e:7a:ee:
79:5b:f2:b7:99:d9:50:80:50:73:c8:81:78:26:a7:
a0:9a:b2:18:13:4d:6d:11:1d:7a:36:9f:51:42:26:
b0:50:f9:a5:16:a7:8d:c1:22:2f:3e:b0:c4:6a:74:
84:0e:9e:41:54:de:58:05:f9:7f:48:9c:53:6b:a3:
94:3c:57:e7:9b:fc:8d:0a:fe:41:9e:aa:be:f3:f4:
a3:c7:1e:4f:c8:ed:34:c3:16:40:75:23:89:1d:8f:
12:5d:4e:66:f8:c7:49:77:a9:16:47:d6:86:91:a3:
87:c3:7c:6c:72:3d:46:72:41:da:80:8d:21:b4:31:
69:18:b7:a5:79:62:6a:67:26:cc:03:e5:a6:ce:33:
ab:0f:fe:3a:c7:95:7c:5f:8b:0f:0f:29:7e:44:93:
68:d6:d8:8a:07:32:50:91:8a:84:1f:00:b1:2c:8c:
00:a0:4c:9f:db:7d:ce:03:f2:f7:1f:6f:34:eb:58:
3e:76:41:e2:8e:fe:87:6b:68:e7:49:95:e8:e7:d4:
1d:a4:92:42:23:1d:3d:53:96:03:98:60:df:1d:15:
76:0e:ae:7c:0e:6f:86:96:9c:e5:d6:f8:06:25:9e:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:06:58:B8:80:C7:4C:F3:61:E4:D6:6C:D4:AE:FF:1E:46:67:FA
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:c8:63:69:06:8e:67:e8:1f:de:4a:d5:b0:c9:e2:3f:70:
69:6b:9e:ae:12:e9:dc:1e:a6:eb:af:22:e0:f8:1b:a7:97:65:
95:4f:12:b0:73:ca:b9:41:cd:89:85:73:71:3a:3b:02:02:a0:
ea:09:da:6d:67:65:cd:10:2f:99:cd:9e:d1:06:38:52:f3:04:
87:ee:76:84:cc:18:74:06:de:77:4c:b9:eb:7a:a8:2d:34:52:
fa:fa:ad:7d:a8:02:ae:b5:34:05:ee:d9:25:a1:f6:24:4e:41:
2b:c4:df:86:bc:73:9f:26:cc:d6:cc:35:5d:42:91:f5:98:a1:
17:59:a0:b5:c9:89:c3:c9:b5:63:de:50:45:18:8d:9d:08:96:
b4:8e:95:78:41:92:ca:4f:46:ae:8d:d7:30:57:1d:01:17:f8:
f0:54:99:9d:d9:63:db:c9:ee:a9:0b:be:d2:5e:43:dc:94:f9:
8c:71:73:bd:af:d0:67:9d:d1:b4:c1:86:c6:53:13:e5:73:a9:
f1:be:91:cb:81:8b:35:20:75:40:70:ab:26:ce:f7:c8:96:a2:
4c:76:2d:cb:81:d1:c6:d7:4a:0e:42:97:7d:c0:75:5c:c8:02:
65:80:b8:98:35:72:b6:34:8f:28:d6:1e:9b:53:8e:7f:55:4c:
69:77:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:01 2025 by rpki-client