Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
File: AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft (raw, json)
Hash identifier: UpKbeRwFMrvHJk6H2VPno51izmDZX1hBRNZeyT7rzps=
Subject key identifier: 5B:30:29:DD:69:D5:16:19:3D:CE:DA:8E:A2:12:64:B3:1E:9C:BA:12
Authority key identifier: 02:51:F6:AB:E0:BB:26:BF:E4:85:9E:54:DE:E0:FD:C9:A5:B7:8A:05
Certificate issuer: /CN=0251f6abe0bb26bfe4859e54dee0fdc9a5b78a05
Certificate serial: 0194BBCE96A33B7CB1ED4AAA1675DA619BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlH2q-C7Jr_khZ5U3uD9yaW3igU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: AlH2q-C7Jr_khZ5U3uD9yaW3igU.crl (hash: CWFVe4NpNsc3JQrFL+3YvQeLlpgbdG2Q8JBmGRl41RM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:a3:3b:7c:b1:ed:4a:aa:16:75:da:61:9b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0251f6abe0bb26bfe4859e54dee0fdc9a5b78a05
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=5b3029dd69d516193dceda8ea21264b31e9cba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:09:55:9e:04:16:2d:38:4e:98:50:ba:c5:
4d:c9:03:29:a0:a3:e0:1a:b5:29:a5:bd:7c:88:40:
8b:8a:cb:5e:64:72:81:28:34:1d:0c:cc:c5:7b:47:
85:a4:a7:14:d5:a5:15:a6:85:86:e6:52:6f:1d:13:
d2:88:90:a2:85:1f:d2:cc:96:30:bf:f4:5b:5c:c4:
45:11:e4:0c:d7:05:f3:9c:4a:84:74:0a:28:69:64:
3a:67:f7:c2:1f:1a:d7:cd:e4:6c:14:05:85:ff:e2:
70:01:fd:d8:3c:4a:bd:d8:a8:c9:c0:76:60:90:73:
44:52:b4:ae:fd:45:dd:f1:ba:1b:0a:c8:b3:6d:76:
61:3f:b6:8f:c2:d5:c9:c4:a5:ef:b1:bf:bd:96:f0:
3e:0a:8a:ad:98:db:c1:c4:f8:51:63:19:32:d3:17:
f2:65:19:72:a9:ed:da:f2:5b:b7:cd:c9:8f:d9:cf:
24:ea:2f:ec:41:d9:8f:fe:61:d5:08:d7:8d:7d:f5:
c7:3e:ab:ca:15:85:4b:d9:b2:4d:6b:07:eb:96:a1:
12:02:7c:e9:5a:bb:10:13:88:94:7a:7d:14:69:5d:
bc:3e:42:55:e1:41:62:4b:ce:ee:ae:b7:dd:c4:7b:
c5:81:c5:0f:c6:af:f6:cb:31:14:b7:ba:c7:ed:f0:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:29:DD:69:D5:16:19:3D:CE:DA:8E:A2:12:64:B3:1E:9C:BA:12
X509v3 Authority Key Identifier:
keyid:02:51:F6:AB:E0:BB:26:BF:E4:85:9E:54:DE:E0:FD:C9:A5:B7:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlH2q-C7Jr_khZ5U3uD9yaW3igU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:86:fd:8f:91:11:af:7b:b4:40:6c:5c:26:b4:a1:7e:0e:
52:7b:a9:f0:de:1a:df:af:c8:14:f5:88:9b:bc:65:02:42:d1:
c7:d6:67:99:2d:18:15:61:3c:b4:3a:75:8b:3f:c0:7b:c6:9f:
d4:35:21:22:fe:55:95:d5:0e:71:6d:65:d9:47:7f:5d:e8:03:
6d:47:ac:1a:d9:53:0e:d6:f8:f0:42:02:42:0c:90:c6:14:08:
d0:d2:33:0d:3b:04:e9:62:68:d5:21:16:7b:8a:29:6d:a4:26:
7e:d8:ab:8f:48:a2:78:dc:0c:e9:d0:76:4c:bc:df:7c:32:ef:
78:0c:14:43:8d:08:6a:74:18:4d:a4:ae:d5:50:ba:51:63:b1:
54:08:99:7f:16:d8:37:cd:68:c8:95:79:4e:9a:cc:6b:9e:b5:
93:c0:4f:66:ae:f1:31:6f:d8:85:1b:28:e6:cd:58:18:16:1c:
46:42:e1:1f:e8:3b:3a:60:ea:97:1b:9c:1c:f3:c1:9a:74:65:
ee:c8:5a:4f:10:37:06:fa:f6:86:43:97:e3:f6:56:57:dd:99:
04:6a:c5:41:87:8a:07:a1:79:68:58:af:47:75:2e:1a:26:19:
41:aa:18:23:36:8c:dc:f4:c8:24:86:77:96:f7:9b:e4:0c:59:
b2:c8:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:30 2025 by rpki-client