Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: WpVLcTEclFDShF5U7e4fiRqhoIEH2I+/yRuPnrcqtOs=
Subject key identifier: 96:AD:06:14:81:E2:28:C5:9C:86:BC:9E:B2:65:86:BC:42:BF:35:2A
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 0194BC3BE9F3F9C7B765B276B0486079F2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: q6AjHy6sS6avKpQEdvyLMgxMyEqvgPsICzwHmj5vaXU=)
2: qUUjm1H90-uL9euvKLjFEczkCzY.roa (hash: oUTa5+ocukOmAJZqVNEO6dDqsHnc1xufuifi9duph8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e9:f3:f9:c7:b7:65:b2:76:b0:48:60:79:f2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=96ad061481e228c59c86bc9eb26586bc42bf352a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:6e:1b:81:54:2d:7e:69:93:09:22:cb:bc:
99:9a:2d:30:87:d6:1c:d4:08:e4:d0:98:fa:04:83:
9e:9d:f4:d9:9a:e4:47:98:b3:e2:72:73:f2:2e:4c:
e9:37:64:24:7f:1b:a1:13:c9:a8:b0:75:ca:3d:85:
08:24:74:2e:51:74:49:f8:e7:51:91:ba:97:23:f8:
58:44:f5:cf:3e:1e:72:52:6b:28:fc:e7:7c:96:9d:
1e:7a:36:39:32:f1:17:05:23:59:70:c7:45:9a:3d:
42:31:71:2e:91:0a:1a:b1:8f:c3:95:03:0f:8b:5e:
e1:d4:18:28:eb:bc:13:4a:97:bb:20:d6:7a:92:c3:
17:1c:01:0b:d8:8b:5e:2b:c4:82:e5:4a:25:aa:0e:
3c:8e:5f:97:95:7f:d9:8f:c4:3e:85:63:7e:0a:37:
c5:dc:c7:da:e6:2f:5e:91:0c:88:2a:08:21:b1:9e:
98:b1:45:ef:a5:66:06:77:e7:3f:81:4a:83:29:41:
68:62:8c:4c:1a:e6:15:45:b8:0a:9d:14:b6:3f:69:
8e:e7:12:be:e4:86:4e:d7:48:53:2e:2a:1e:76:be:
33:3f:d1:be:4d:d7:72:94:ae:e3:42:3d:42:59:bb:
1a:94:e9:f7:12:10:bf:f6:8f:6a:3c:1a:70:8d:d8:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AD:06:14:81:E2:28:C5:9C:86:BC:9E:B2:65:86:BC:42:BF:35:2A
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fd:a7:31:9a:82:12:f4:75:5e:2c:b6:7b:7f:fa:a0:b8:26:
1b:85:84:21:15:6c:8a:7e:42:fc:ae:8e:10:44:3e:ec:52:42:
2a:c7:66:e3:2f:8f:6d:14:b8:35:55:b2:ae:bd:7f:75:ef:23:
2f:b3:c1:97:29:f0:76:4d:4f:8a:29:ec:58:93:8d:10:fa:e7:
d3:87:39:ce:58:2f:08:87:ac:6c:86:87:de:0e:d6:05:32:50:
eb:a1:f6:d2:0f:cc:e6:b0:46:42:21:64:86:ec:16:52:81:50:
30:09:25:40:be:41:c1:77:20:9c:73:2f:cd:b5:7e:2f:ce:70:
f4:bb:71:58:e0:90:0c:26:6b:83:d6:38:da:e3:e2:e0:b2:e0:
b6:e5:42:66:8f:26:68:22:60:a4:de:be:39:98:61:03:aa:ee:
e2:6d:24:3a:5a:6e:b7:38:ba:d5:02:15:24:29:d0:ff:ab:76:
6d:fa:41:f6:93:c2:35:69:73:6d:08:91:76:94:af:3b:4d:df:
7c:30:74:f3:28:46:93:1c:c0:a0:bc:31:bc:4d:b7:6b:de:e7:
e2:d3:60:3d:ed:d0:db:4a:46:4c:04:44:ef:bc:2c:bb:40:9e:
bf:67:d2:e0:29:18:36:5c:bf:18:a3:a0:c5:96:e8:5f:ef:8b:
f8:10:0c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:40 2025 by rpki-client