Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.mft
File: ao52TAV-Idl-bLg-2w7lKECwRLs.mft (raw, json)
Hash identifier: rlma/kB5+pU0jSQjDVF2g2pblJDzpeP+rxlRWIabpAI=
Subject key identifier: E7:F4:CF:48:6F:A1:E5:AD:64:0B:98:0D:BE:2C:E2:66:94:5E:3E:C7
Authority key identifier: 6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
Certificate issuer: /CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Certificate serial: 018B6B37639803E2FC7F596FB965935966FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.mft
Manifest number: 087E
Signing time: Thu 26 Oct 2023 09:01:13 +0000
Manifest this update: Thu 26 Oct 2023 09:01:13 +0000
Manifest next update: Fri 27 Oct 2023 09:01:13 +0000
Files and hashes: 1: ao52TAV-Idl-bLg-2w7lKECwRLs.crl (hash: pGzPXiFcgXW9Xd04ZcFzc6+vYjlv1lrpkqG8IeaDGmI=)
2: ejzA7QOwn1Iy4Kh-XNc5SOnM_eQ.roa (hash: 65az9RTHEssWysc1z3fFYNhmJM+9moH9aqKchj9tIXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:37:63:98:03:e2:fc:7f:59:6f:b9:65:93:59:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8e764c057e21d97e6cb83edb0ee52840b044bb
Validity
Not Before: Oct 26 09:01:13 2023 GMT
Not After : Oct 27 09:01:13 2023 GMT
Subject: CN=e7f4cf486fa1e5ad640b980dbe2ce266945e3ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:43:6d:84:7e:86:bd:2c:2e:e6:02:c3:e2:
78:21:9b:e1:f4:26:ac:c8:95:78:8b:c1:3e:1b:f4:
05:65:28:4b:23:3b:49:1a:d7:7a:75:65:9f:ce:9d:
74:9e:e4:48:ea:fb:77:8b:9e:c6:a4:12:48:a2:fc:
6a:6e:bb:92:6d:70:58:6a:d7:fe:e0:90:d5:88:31:
2b:13:58:8d:65:17:d0:20:2a:0a:35:28:f3:30:6d:
18:4c:22:99:b6:eb:ca:e3:55:08:a5:3f:a6:ea:be:
16:e5:ee:a6:63:67:f2:44:04:7f:87:de:cd:88:87:
09:63:3c:3f:e7:83:c0:9d:47:6a:55:64:8c:5b:c4:
f0:9c:82:19:bd:95:a5:4c:c2:df:ea:de:77:da:99:
7c:b4:c6:7a:3e:86:7d:86:42:da:1a:de:db:63:5e:
d8:22:4d:d8:48:63:56:9c:75:79:10:07:16:76:46:
a7:3a:56:af:41:b1:a4:8c:01:50:cf:a5:38:16:79:
0f:5d:73:aa:9d:dc:aa:97:60:ae:bf:0a:82:ea:fa:
18:77:da:15:0c:bd:c3:1d:fb:a9:ce:58:84:7a:0c:
3d:7b:15:1a:f9:e9:03:60:6a:bf:4a:cc:98:a7:e1:
c5:d9:77:23:63:4e:bf:34:83:88:02:9f:50:74:7c:
02:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:CF:48:6F:A1:E5:AD:64:0B:98:0D:BE:2C:E2:66:94:5E:3E:C7
X509v3 Authority Key Identifier:
keyid:6A:8E:76:4C:05:7E:21:D9:7E:6C:B8:3E:DB:0E:E5:28:40:B0:44:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao52TAV-Idl-bLg-2w7lKECwRLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/46a1ac-7085-4a92-8efc-c1235e77cfe1/1/ao52TAV-Idl-bLg-2w7lKECwRLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:f6:ca:1b:ae:ce:48:f4:43:1e:c2:05:a1:40:41:f1:c7:
21:4d:ee:83:9f:d1:96:66:22:a1:f6:9d:35:48:42:47:c8:74:
71:d8:82:68:c5:d9:22:0c:f3:ac:a6:b8:6a:f7:a8:2c:cc:6d:
0d:0c:32:21:3d:5f:a6:50:2c:bd:a2:80:a5:9e:42:e5:d4:c2:
11:e4:dd:81:6a:9f:60:ce:ff:4c:b5:2d:5c:5e:0a:d6:34:97:
a3:b0:3d:b3:71:c1:b9:09:bf:af:31:24:66:51:e7:f4:83:46:
fc:ae:fe:61:13:3e:b5:51:fb:9d:1c:71:b8:d3:5f:c8:36:b2:
e7:a8:2a:c0:98:ba:b9:6d:2a:7e:c1:8b:b9:f3:89:c6:0a:b5:
64:ff:76:b4:91:37:51:ad:c7:90:ab:dc:1a:6e:c3:46:6e:05:
9f:0c:0d:51:58:77:a6:ae:33:4b:36:95:07:28:95:e9:6c:5d:
fb:f3:8e:26:e1:46:0c:bb:44:40:ad:c1:11:14:38:de:0b:77:
51:83:87:b1:85:6e:3c:92:0c:eb:20:21:4a:a1:4d:2c:15:53:
d6:0a:15:9b:eb:0d:02:46:aa:b3:47:02:91:55:ad:ce:0d:74:
89:7b:f3:c2:2f:e7:51:8e:7e:22:90:2f:da:1d:b2:70:06:77:
59:e5:f5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:29:48 2025 by rpki-client