Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft
File: pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft (raw, json)
Hash identifier: jS2hPDJmvKniV1zG6l07lcKi41/4tDGDVvPz3F3s/6E=
Subject key identifier: D3:38:CF:85:76:E0:97:E7:47:70:CD:60:50:DB:F8:22:C9:70:35:CB
Authority key identifier: A4:06:8C:66:55:C3:33:FC:71:28:32:C1:13:F6:7F:1F:D6:88:AE:C4
Certificate issuer: /CN=a4068c6655c333fc712832c113f67f1fd688aec4
Certificate serial: 0194BBCE3B2DD79212A884D9F805CDEDFBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft
Manifest number: 1127
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.crl (hash: JGrIJzk/2c225VGGnvV9z5YSk5WkUvLu2SATyD26RAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:2d:d7:92:12:a8:84:d9:f8:05:cd:ed:fb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4068c6655c333fc712832c113f67f1fd688aec4
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=d338cf8576e097e74770cd6050dbf822c97035cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:ab:a1:7e:17:9e:a7:97:f9:7a:f0:d2:53:
3c:cd:fa:43:be:60:52:ab:2b:0e:c6:8a:e0:d6:f3:
ae:47:0e:4d:7c:29:7c:89:a1:03:26:09:58:65:77:
4a:11:77:89:31:ef:7e:17:85:13:94:7d:68:ed:ab:
0c:ee:02:53:9a:5f:50:e9:9b:18:e6:1e:08:d2:c1:
0e:0f:d7:f1:7d:7a:0b:75:17:76:7c:a6:18:ea:d6:
53:7b:b0:f7:b5:86:b5:10:63:57:51:57:ab:31:a2:
e3:5c:4f:29:7b:23:f7:1c:d7:e3:ef:30:02:ea:13:
51:82:00:82:4e:70:8c:bd:cf:ae:0c:90:9f:a6:58:
df:76:ed:ad:26:a7:f9:08:56:1d:1f:d4:6c:9d:c2:
ac:70:a3:af:05:4c:c2:2a:62:15:6b:e8:95:4c:24:
3e:d6:30:95:13:60:9d:09:02:6b:e7:60:b2:ae:06:
1e:14:fd:b3:e9:d1:49:a9:be:74:40:be:fa:ea:9d:
44:cd:7b:79:d6:78:ae:4b:56:50:02:ac:ec:6e:7a:
17:7f:b9:20:7c:87:01:81:83:a0:94:e5:d3:c4:5a:
01:9f:74:59:0d:f9:52:ec:39:51:e6:e3:9a:4b:ea:
fd:9e:8d:85:0f:10:4f:34:75:86:24:fa:ea:56:ae:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:CF:85:76:E0:97:E7:47:70:CD:60:50:DB:F8:22:C9:70:35:CB
X509v3 Authority Key Identifier:
keyid:A4:06:8C:66:55:C3:33:FC:71:28:32:C1:13:F6:7F:1F:D6:88:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0aef2b-1e45-4ad5-a80c-86dee207f81e/1/pAaMZlXDM_xxKDLBE_Z_H9aIrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:37:54:e7:da:09:d7:a7:79:f6:47:e4:8f:f8:ea:01:3d:78:
39:3a:07:95:2e:f7:42:d5:67:24:a7:2f:bd:98:37:95:ef:b5:
7a:d3:6d:43:5b:14:75:7f:0e:e3:6b:e9:c0:e7:1d:ae:d4:18:
27:93:6b:bd:93:9a:47:e1:e3:ab:05:d8:39:ff:e2:49:18:ac:
a8:0d:08:71:f4:f1:08:77:f5:e4:79:ad:e9:d3:b2:fa:6e:3f:
a1:aa:0e:7b:bc:55:0b:04:09:1f:b4:58:8c:b3:ff:15:f6:59:
40:92:9c:17:63:7c:d6:7e:85:96:c6:5c:c9:a0:f1:9a:36:45:
a3:bc:61:45:75:03:3c:ac:51:8b:76:19:69:85:42:43:2c:2f:
b2:25:55:7e:49:a0:9d:bf:ce:3d:51:e5:b0:9d:f9:d5:cf:77:
3e:b4:d5:51:11:58:97:b4:1f:74:16:77:7f:29:84:eb:86:08:
f2:20:fd:c2:91:b0:e9:ea:ed:0f:d5:4b:69:36:99:87:6a:47:
45:2a:49:3a:ee:18:f0:e8:df:ed:f9:65:b0:83:2b:f3:f8:98:
0e:fc:69:b3:8a:eb:1a:f0:b6:f6:d4:0b:78:70:c4:ec:f0:b4:
2f:b6:1e:17:5b:9d:1c:53:3f:75:75:66:d1:ad:4b:e3:de:97:
8a:2a:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:33 2025 by rpki-client