Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: dMz+iSzmSo7caB01JSVxdu5GZBshiimrd0M+/FZjgBA=
Subject key identifier: E5:09:04:19:43:03:52:ED:EE:B1:D6:E4:AC:F0:13:49:A9:03:7E:C1
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 0195E07D4422C698CE943A04F949531671FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 01A5
Signing time: Sat 29 Mar 2025 06:01:00 +0000
Manifest this update: Sat 29 Mar 2025 06:01:00 +0000
Manifest next update: Sun 30 Mar 2025 06:01:00 +0000
Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: UA4CdAea99vHh/Ob0V5TAv7RDCRH3rqlYlG4KRKYq0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:44:22:c6:98:ce:94:3a:04:f9:49:53:16:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Mar 29 06:01:00 2025 GMT
Not After : Mar 30 06:01:00 2025 GMT
Subject: CN=e5090419430352edeeb1d6e4acf01349a9037ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:a2:87:45:c3:64:05:cc:c7:f1:20:10:42:
bf:fe:34:c5:6b:0b:24:e3:82:59:6e:3d:90:8e:e6:
09:71:1b:62:41:97:fc:0e:f6:07:cf:b3:28:ee:47:
dc:5c:31:87:b8:85:61:b2:b7:af:3c:d8:23:c3:f4:
72:b4:45:8d:80:f1:cb:b8:1a:35:c4:75:b1:68:71:
1c:98:a6:9d:48:e8:03:9f:76:eb:c2:ce:e8:ea:3d:
f9:97:ee:4c:ad:d1:02:cb:99:cf:31:26:61:da:e4:
b9:63:54:da:89:ed:48:be:47:f9:a4:9c:7d:af:af:
1d:58:62:d4:ce:e3:8a:e5:18:63:f7:a8:c9:7b:0f:
70:86:24:02:12:eb:b8:82:2b:99:ff:74:f1:ed:79:
7a:d3:e3:1d:1b:e2:7e:ad:f6:e7:5b:10:d9:1a:b8:
e8:60:eb:ce:41:7c:39:1c:59:db:b3:00:4b:a2:f0:
6c:a2:0d:c6:4a:68:f4:24:a7:7a:6a:15:7d:a5:d5:
a8:08:22:4f:bc:82:17:f8:ec:83:67:3b:d3:26:b1:
f5:33:77:d1:d2:35:92:90:fa:11:b2:a4:2d:83:8e:
78:4c:1c:37:6c:d4:07:a9:5d:cc:6c:23:20:d4:a7:
79:0e:67:72:2f:f9:50:63:de:d4:c4:87:bc:0d:bc:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:04:19:43:03:52:ED:EE:B1:D6:E4:AC:F0:13:49:A9:03:7E:C1
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a1:3a:c9:d4:8b:d7:1c:0c:1d:15:f6:8b:e5:a0:47:c3:4e:
77:94:65:12:ec:33:99:34:03:a6:f3:25:4b:55:8a:89:67:04:
ff:9e:de:a4:37:d0:5b:17:d9:fc:47:b9:22:1e:c8:17:e3:c9:
8d:18:67:7f:70:65:44:aa:39:1a:f3:65:86:f0:3a:4a:94:18:
9a:77:e2:90:38:e6:1c:a1:3f:80:ce:34:4f:8f:7a:ed:57:49:
b2:28:c9:03:7c:4d:62:8e:93:41:7b:a6:30:77:2d:d9:38:66:
49:26:9a:0c:71:30:c7:fe:a0:3b:dc:60:39:4b:aa:1d:5e:4e:
fc:20:6b:81:e2:43:c8:5f:dd:0e:21:9b:18:83:62:d0:d2:80:
33:0a:70:0b:e9:83:ff:ce:ad:2b:1d:67:9b:7a:38:c2:5c:5d:
93:a1:5b:a6:8a:74:a9:dc:37:31:a0:73:f8:ff:53:b6:c1:c4:
16:44:75:a8:4e:5c:b8:48:c8:a2:20:53:69:98:21:ad:e5:6a:
d8:17:97:43:9f:36:1b:64:15:32:fb:df:cc:74:ae:cb:29:ee:
bf:71:9a:18:71:c8:36:53:24:3d:b3:d7:eb:6c:6a:da:05:f0:
c4:8b:4e:75:97:9f:0d:43:08:29:e5:57:9e:b5:a9:e6:3c:c1:
91:43:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:11 2025 by rpki-client