Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.mft
File: AaKifmUDOkGN6jkmPGn7Ikke1V8.mft (raw, json)
Hash identifier: msWTO58qxRi6NUu+sAnCZkXEUv2N82gHfQOIMDGvqd4=
Subject key identifier: 75:59:47:36:E3:B0:2B:C9:B7:3D:9F:39:01:E7:0D:5C:33:E8:8F:E5
Authority key identifier: 01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
Certificate issuer: /CN=01a2a27e65033a418dea39263c69fb22491ed55f
Certificate serial: 018483AFCF3CA0DD4B13F97A863168FDE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaKifmUDOkGN6jkmPGn7Ikke1V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.mft
Manifest number: 0B03
Signing time: Thu 17 Nov 2022 03:44:07 +0000
Manifest this update: Thu 17 Nov 2022 03:44:07 +0000
Manifest next update: Fri 18 Nov 2022 03:44:07 +0000
Files and hashes: 1: 1Lx-ZtkLIs903_P2h5_OApJw4qU.roa (hash: yPyDeSrQROWvk2jx2XmC3hE565piaLxxCdehF/x7AL8=)
2: AaKifmUDOkGN6jkmPGn7Ikke1V8.crl (hash: fXQ8GyHghBjHQ5BgDC4piWkeFu2PsdXRQcHSk5L+y3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:83:af:cf:3c:a0:dd:4b:13:f9:7a:86:31:68:fd:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a2a27e65033a418dea39263c69fb22491ed55f
Validity
Not Before: Nov 17 03:44:07 2022 GMT
Not After : Nov 18 03:44:07 2022 GMT
Subject: CN=75594736e3b02bc9b73d9f3901e70d5c33e88fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:15:76:5a:93:2b:03:68:5f:82:07:30:02:
2c:f5:12:10:3c:13:12:77:77:9f:70:fa:ec:f3:9a:
08:f9:21:57:68:60:2d:30:3a:b0:58:e8:41:09:bb:
2e:2b:57:01:70:c4:c0:d7:c8:12:67:f6:4a:2c:e8:
2b:e5:57:fc:3f:ba:8d:7a:cd:a7:ac:b0:6d:70:90:
a6:d3:0c:04:6a:01:14:76:ef:af:41:64:b1:b6:b0:
5a:78:49:85:43:6f:fb:e3:94:3e:aa:87:82:5f:f7:
e7:14:a2:b6:c3:d6:45:41:62:f9:80:6c:1f:00:da:
b8:4b:1a:28:91:ab:a8:21:b6:76:a2:2b:ef:d5:07:
2d:68:08:2a:1c:bc:c8:4a:77:57:51:57:e7:b4:79:
fb:74:d5:d2:28:22:8b:d5:12:67:06:43:59:f1:7d:
d0:c4:1f:77:b5:0e:d4:ff:da:e7:91:b5:f3:10:3d:
7a:57:88:00:37:05:8f:91:59:b7:e7:97:b1:cd:b4:
ad:01:90:70:65:96:b5:e0:fd:11:3d:d4:41:45:0c:
58:b3:df:ee:dc:ee:ec:3a:78:15:3b:6a:aa:27:ad:
de:d7:35:3a:4b:f3:fa:54:13:e9:8e:5b:9a:ca:50:
28:06:94:69:d4:d0:2b:a5:94:84:e7:86:42:a0:54:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:47:36:E3:B0:2B:C9:B7:3D:9F:39:01:E7:0D:5C:33:E8:8F:E5
X509v3 Authority Key Identifier:
keyid:01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaKifmUDOkGN6jkmPGn7Ikke1V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:88:65:c3:da:44:81:06:da:89:21:de:a2:a1:ac:97:21:
10:f4:4a:cf:33:5b:5a:89:24:e2:37:c5:94:ca:65:82:12:15:
5f:eb:51:52:73:7f:b0:69:dd:be:c3:3b:e2:e5:12:bb:e5:61:
aa:50:7a:0a:c8:b0:d7:06:eb:df:18:dd:47:94:15:38:e9:43:
01:6a:40:b6:d5:ae:c7:70:14:bd:a5:5b:ad:9c:44:4b:f0:d9:
96:cc:d6:d7:cf:da:a8:41:d4:a8:f8:72:b2:39:8b:51:74:e6:
72:ae:44:ac:5b:bf:77:be:b9:6d:6d:cc:5b:08:5f:41:03:53:
62:f0:60:cd:ae:9a:af:23:44:7e:2b:cd:fe:5e:c4:70:9a:a0:
54:31:bd:8a:35:0d:98:5a:65:2a:20:f4:03:6a:bd:0d:b5:3f:
7e:e7:62:12:20:33:5c:10:ca:da:f4:cd:30:84:e9:e1:bc:ee:
19:21:b0:c6:0e:40:43:00:9e:d5:a9:e8:44:b3:32:f6:06:92:
cb:f2:ff:3f:8a:dc:59:7a:ef:ed:8f:f7:de:4e:42:f1:4c:ab:
bc:0f:57:46:33:c3:79:f0:97:93:56:36:e0:ad:56:27:9e:df:
28:5d:08:5c:cc:9e:43:d7:5e:6f:be:4f:68:59:42:1b:48:68:
f1:12:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:46 2025 by rpki-client