Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.mft
File: aE1dX9ftEHHKRznw4ji6UVNGw6E.mft (raw, json)
Hash identifier: fkZsO4Z8YgzlZ4eoOuavgPo0IAKrpx1ihfDq/TWN9jc=
Subject key identifier: EF:FB:F9:32:AF:08:6D:2B:24:9B:4A:06:3F:60:93:B1:ED:57:01:7D
Authority key identifier: 68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
Certificate issuer: /CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Certificate serial: 018D5DAD27AD702722865A54AFA7F3A1D444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.mft
Manifest number: 08EC
Signing time: Wed 31 Jan 2024 04:00:45 +0000
Manifest this update: Wed 31 Jan 2024 04:00:45 +0000
Manifest next update: Thu 01 Feb 2024 04:00:45 +0000
Files and hashes: 1: SBBGUVO3y4MB9GyPRxQE6n3MIdc.roa (hash: 4HqQnK1wW6DbK3hh0sSO9e84QxeTWVdWk+tslzQSJEs=)
2: aE1dX9ftEHHKRznw4ji6UVNGw6E.crl (hash: iReL6Cog9bV7TZBC05XQ8BDaCl6Xl5KIXfs+6ve3M9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:ad:27:ad:70:27:22:86:5a:54:af:a7:f3:a1:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Validity
Not Before: Jan 31 04:00:45 2024 GMT
Not After : Feb 1 04:00:45 2024 GMT
Subject: CN=effbf932af086d2b249b4a063f6093b1ed57017d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:44:5b:6c:49:ce:f4:a9:31:9e:33:f8:da:
4f:bc:bc:0f:8f:72:db:76:0d:16:a5:d1:71:77:df:
8e:8e:cf:70:e9:6f:04:d2:44:32:1c:2d:ca:cb:4b:
76:c9:0d:20:db:af:67:0e:11:8a:9e:c6:10:8d:4a:
00:29:98:11:a5:e6:3a:06:33:c6:4e:b4:0c:97:b6:
df:66:9a:86:f7:dd:95:b6:10:1c:83:3e:87:da:78:
d5:39:83:1b:12:89:a7:2e:a0:53:dc:a7:84:b4:4a:
c2:fc:14:ed:82:e6:8f:42:f6:49:40:40:3d:a3:44:
34:57:66:62:87:63:51:f2:e4:b5:4b:ba:c3:ba:88:
20:24:e8:0e:6e:88:04:b4:bc:41:8a:a1:7d:f4:47:
71:9a:45:ed:1f:7e:0c:e8:56:47:e0:e4:73:f2:af:
20:bf:08:3c:d5:fd:77:cc:55:f8:83:c4:82:c3:cd:
29:a0:4d:df:67:b7:8b:2c:3c:03:d7:36:58:c4:3c:
98:20:b3:b5:06:9f:94:e3:61:13:f4:db:f5:3c:71:
52:c0:ce:27:dd:5a:45:13:af:0b:9b:d0:40:d4:a9:
ed:dc:69:db:77:23:83:52:ad:d0:6c:38:28:a8:0d:
1e:69:b7:5e:78:87:f9:01:13:ae:de:bb:c9:1f:2e:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:F9:32:AF:08:6D:2B:24:9B:4A:06:3F:60:93:B1:ED:57:01:7D
X509v3 Authority Key Identifier:
keyid:68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ef:14:c7:2a:a8:89:b9:57:f2:4b:1d:09:36:3f:34:e6:4d:
99:da:50:00:b6:29:86:d8:04:00:f1:8a:a2:6a:03:7e:ac:d2:
b7:3d:4f:72:a2:69:a0:20:96:38:1d:a5:79:7a:bf:34:96:12:
e1:c8:34:7d:e0:fa:a8:68:93:8e:80:e2:fb:e5:d8:7f:d2:ca:
a0:7e:b2:8a:43:4f:ff:d1:33:9b:fb:c2:4e:8f:38:61:51:c6:
9e:e4:89:25:5e:f1:20:ac:d2:29:b3:04:3f:e0:3e:31:95:c6:
54:ef:9a:c8:c9:91:f3:5f:b4:2d:b5:16:1a:a6:cd:0a:85:c9:
a3:df:10:50:ff:f3:86:13:e0:99:48:34:e4:98:d6:6e:9d:fa:
c6:58:9f:8c:6b:d3:0f:31:06:c1:a6:52:5f:8b:80:41:04:c3:
ad:ff:c9:82:d4:94:b3:d2:ed:42:f9:ed:4a:69:4c:c9:0c:11:
3c:3c:4f:c0:3b:13:3c:d5:ea:c9:87:97:b9:90:fe:ec:8d:d1:
f3:b5:9a:45:10:48:6b:f4:68:01:f7:2a:0e:97:e7:a7:7e:b9:
55:12:a0:ea:16:01:75:d6:f2:71:9f:91:99:18:d7:0b:1f:b3:
e1:01:a6:7c:58:98:9b:30:74:11:23:1a:fd:35:15:3e:d6:40:
10:0e:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:51 2025 by rpki-client