Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/abeb11-e681-434c-8558-ab7700b1627f/1/ay8iq_V0f9_NUWPLkkYI4ceM0YI.mft
File: ay8iq_V0f9_NUWPLkkYI4ceM0YI.mft (raw, json)
Hash identifier: 1h8c1w4q6JQxMayYoJHSM7+E8YDm+upLJisabiHTzGQ=
Subject key identifier: 19:ED:32:F5:61:D1:48:B8:8C:86:9B:03:41:78:97:37:C1:49:5F:C1
Authority key identifier: 6B:2F:22:AB:F5:74:7F:DF:CD:51:63:CB:92:46:08:E1:C7:8C:D1:82
Certificate issuer: /CN=6b2f22abf5747fdfcd5163cb924608e1c78cd182
Certificate serial: 019275DF57245187A5F9D9D3A00E47691F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ay8iq_V0f9_NUWPLkkYI4ceM0YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/abeb11-e681-434c-8558-ab7700b1627f/1/ay8iq_V0f9_NUWPLkkYI4ceM0YI.mft
Manifest number: 07FA
Signing time: Thu 10 Oct 2024 10:00:23 +0000
Manifest this update: Thu 10 Oct 2024 10:00:23 +0000
Manifest next update: Fri 11 Oct 2024 10:00:23 +0000
Files and hashes: 1: ay8iq_V0f9_NUWPLkkYI4ceM0YI.crl (hash: /7cSER4MiuyTeIK4jSbU4wntJXOYWN53JhScyhhpFow=)
2: zeE7LDYW8S6VFeQxGAAUbA9B5Mc.roa (hash: Eo16ePyErqss+zoE8fETDei9lVNGPpmgAYnFkH59s+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:df:57:24:51:87:a5:f9:d9:d3:a0:0e:47:69:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b2f22abf5747fdfcd5163cb924608e1c78cd182
Validity
Not Before: Oct 10 10:00:23 2024 GMT
Not After : Oct 11 10:00:23 2024 GMT
Subject: CN=19ed32f561d148b88c869b0341789737c1495fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:d2:67:ca:d3:63:56:5c:8f:5b:25:ce:81:
c9:15:6d:59:8c:44:85:76:f6:86:4e:8c:cf:f5:e2:
22:f2:99:70:04:0c:36:dd:94:8d:4d:8e:ca:eb:65:
33:fe:f4:65:44:68:b2:06:67:f8:1d:4e:e0:04:11:
2a:dc:71:f3:bb:62:d9:85:e6:66:6d:5e:fa:bb:0a:
ae:cc:f8:d5:2c:4f:10:73:82:56:93:ec:f5:74:2d:
a7:49:bf:14:a5:ba:65:40:2a:68:2e:85:73:a6:e7:
7f:5b:75:aa:88:5e:46:b7:26:06:f7:36:fc:52:b0:
a1:0a:31:65:d5:fd:8c:f5:51:26:b6:c6:ab:3f:d5:
88:d2:e0:7b:01:33:fd:9f:64:cd:6e:ca:28:1b:0d:
e3:b6:59:4d:e4:c2:32:dd:79:c0:3a:ed:df:f9:75:
b1:64:0d:6e:55:3c:12:5e:63:55:9b:84:14:40:f6:
32:32:4b:63:4d:62:62:a7:ea:8f:ef:cc:bd:9f:e7:
1d:c1:94:bb:eb:6a:5e:0f:61:95:4e:3a:4f:c1:d2:
aa:66:5b:bc:da:a9:09:f5:b0:66:f2:b3:1f:2f:d3:
76:64:da:f0:5b:4e:b5:7c:0f:fb:ba:db:d8:8b:65:
1a:51:6e:ab:f0:a4:72:89:9f:a6:07:ea:66:bf:6b:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:32:F5:61:D1:48:B8:8C:86:9B:03:41:78:97:37:C1:49:5F:C1
X509v3 Authority Key Identifier:
keyid:6B:2F:22:AB:F5:74:7F:DF:CD:51:63:CB:92:46:08:E1:C7:8C:D1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ay8iq_V0f9_NUWPLkkYI4ceM0YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/abeb11-e681-434c-8558-ab7700b1627f/1/ay8iq_V0f9_NUWPLkkYI4ceM0YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/abeb11-e681-434c-8558-ab7700b1627f/1/ay8iq_V0f9_NUWPLkkYI4ceM0YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:ea:e5:7c:9b:f8:48:c6:0b:e4:bc:a7:0b:4b:f6:1d:bf:
22:29:86:d5:d5:52:ba:80:9b:b3:54:9e:38:67:ba:f1:1e:2e:
f6:06:cf:48:a5:48:b2:68:9a:51:50:c1:20:88:13:60:7e:f8:
18:4e:31:b0:c4:f6:c2:99:67:6f:87:9b:e4:b8:1a:ff:e8:c3:
28:46:b7:2b:5a:02:5d:40:d1:ce:ca:3a:af:e0:b2:bc:1b:13:
df:60:ea:54:dd:b0:2d:28:f2:87:b6:a9:12:31:7a:10:68:23:
68:4e:88:5e:4d:27:70:fc:c4:a2:07:42:d6:64:ae:3c:2c:da:
6c:e2:00:1d:7a:2a:f3:51:01:21:a1:e4:69:23:6c:28:00:01:
d9:3a:ea:ad:5d:19:f7:8c:4f:41:58:68:53:fb:66:95:29:ff:
07:0f:ca:48:fc:06:90:a7:24:07:6a:b8:6c:d1:c6:03:f7:80:
03:f1:6f:bf:08:7c:de:52:9d:90:84:62:a2:67:ed:5e:0d:43:
10:d5:92:9f:65:67:74:34:0b:e7:fe:bf:e8:aa:63:f1:ec:2d:
b9:f2:c8:2b:3b:e0:7c:93:b5:5f:90:9d:e3:2d:89:ea:e8:96:
7b:5f:3d:f6:f7:3a:50:a3:bc:87:b4:7e:9b:bb:c2:25:69:06:
3f:e7:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:28 2025 by rpki-client