Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
File: AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json)
Hash identifier: 4yW7PGtMNrMt7e3gWp29H83gWPYk3wMEUFbQJq47ypc=
Subject key identifier: E3:D8:37:17:9A:8F:55:C4:FB:07:19:E3:32:CC:85:9B:4E:EB:7D:40
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 0194BCA9D52B93E6ADCB9AC51C2D6EA1C733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: zpDh3+28+xkyA53HIx4AcDXb/nGqh4dgyPeoHHUyOkc=)
2: osyzbtU7GZmaeY_CNmdQy5Vz8jw.roa (hash: /Wf83f8E6EuxQUr3auZsag/VGfFdi1UD8Jonkresr4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:2b:93:e6:ad:cb:9a:c5:1c:2d:6e:a1:c7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=e3d837179a8f55c4fb0719e332cc859b4eeb7d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:73:79:ad:36:43:5a:87:6e:3e:b8:b7:be:
e6:b1:c4:a3:e7:b3:e0:5a:bd:0a:2f:26:e5:69:0a:
b9:4a:15:ab:48:19:68:5c:eb:19:cc:ab:5a:77:45:
e0:e2:b6:25:ed:d7:f8:19:80:0b:83:87:82:f8:d1:
b9:b0:95:ee:40:de:2c:ae:e5:32:56:a0:9e:63:a2:
e7:77:48:ec:ee:2a:f5:9f:7a:90:da:fb:20:75:de:
36:1e:cf:5c:90:fa:6a:94:60:f1:29:e5:44:ec:49:
a0:96:6d:0b:ef:3f:ea:73:89:5c:e2:0a:0c:03:f7:
d3:62:29:70:6a:77:77:44:c3:29:41:f9:33:e3:0f:
6c:9a:b0:d8:73:5f:41:c6:b3:47:e1:0f:78:7b:cb:
cc:24:63:11:6f:c5:8c:93:ae:0a:33:de:56:55:60:
3a:e7:e7:2e:c6:a7:e9:b5:9e:7a:41:a5:0c:dd:b9:
ec:48:ff:2f:71:5f:c2:10:b5:9a:f5:3b:dd:c5:44:
57:1f:c3:e8:82:d0:02:a0:cb:8a:33:84:f7:54:04:
ad:01:2c:c1:de:1a:38:40:94:1f:68:e0:19:dd:b0:
6f:c1:8c:38:44:df:4f:1a:97:6e:d6:8e:81:fe:84:
c4:a6:04:27:6e:75:63:96:f2:74:6d:41:b6:2f:fb:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:37:17:9A:8F:55:C4:FB:07:19:E3:32:CC:85:9B:4E:EB:7D:40
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:24:ff:29:21:0c:42:ba:30:5c:12:27:be:2c:75:20:ce:1c:
ff:e9:69:b5:e9:de:a0:24:a9:09:c1:0b:65:85:94:51:32:7a:
34:d0:28:6e:6d:55:e7:1d:5f:47:d6:26:51:36:16:5d:47:e9:
bb:9c:2c:9a:c8:0f:2b:e0:8c:f2:04:0e:c0:62:f6:3c:00:1d:
cf:b1:41:68:6b:60:93:5d:c6:76:5c:4b:7f:69:03:e2:05:15:
07:f1:07:76:3f:61:96:43:25:ea:57:0f:5f:c6:56:e3:6c:63:
79:1a:54:78:ef:61:5b:71:a2:fe:05:7a:54:49:06:c9:1e:96:
ad:3e:6a:ca:7f:64:6c:09:ff:c0:bc:fb:79:32:f0:b4:b9:38:
89:4b:c1:84:a8:f8:d3:ba:85:66:7d:18:22:5c:ac:81:e5:99:
6c:96:08:b7:6a:c5:c5:50:6a:42:46:5e:58:b5:74:36:dd:f5:
46:9e:c8:e0:d3:d9:f3:a6:6a:0d:61:26:52:36:c2:60:cc:53:
0e:88:0b:f1:63:0c:33:da:85:da:3b:a5:72:cc:a8:28:5c:f0:
09:ff:ac:50:8a:08:92:29:3e:a9:34:b5:43:e6:82:51:e2:06:
69:c0:c0:10:5a:ae:38:d7:09:a0:99:5e:ec:21:eb:fd:ea:49:
36:86:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client