Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File: aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier: iwYOt6nayNyE2zU9Z/pqQi/SeMgLHaQ+2Oin5CXCeN4=
Subject key identifier: D1:DB:0E:7A:D9:D5:97:E4:AA:25:D6:65:DD:7B:9E:50:BF:1A:09:25
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer: /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial: 0194BBCE99CB66E3A0B5B73F9556E28E28ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number: 08B1
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: pG6u/eeXfuzrnQJ2eYQxu1nuVDEGdhRipX8perT0B8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:cb:66:e3:a0:b5:b7:3f:95:56:e2:8e:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=d1db0e7ad9d597e4aa25d665dd7b9e50bf1a0925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:94:fe:55:1f:dc:a6:ad:fe:dc:61:06:4a:
e3:9f:0e:f4:e7:0b:b8:09:37:f6:dc:7e:38:5d:80:
ec:78:c8:27:7e:e8:80:8f:e6:d3:27:d7:0a:43:74:
f9:a7:95:e3:71:ac:12:ac:30:54:96:09:cc:d7:e4:
0f:4d:3d:1e:f0:3f:d2:03:a8:d0:6f:00:f0:04:92:
19:79:f9:6e:de:cf:e1:5a:f6:f4:1c:58:32:49:a6:
43:04:30:39:23:c2:8a:2b:5e:2b:c1:68:3c:4e:d0:
c2:5a:11:3e:ac:90:3a:51:b6:f1:55:cc:f3:91:de:
22:30:39:b1:be:29:fe:7b:5f:23:18:ee:05:f6:df:
89:62:6f:cd:04:1d:08:4a:14:d7:24:b5:e9:b0:83:
c5:8f:51:e0:d5:2d:3c:f0:c3:d4:f4:7c:3f:70:2b:
0c:f7:63:86:ae:a5:13:6b:9e:1f:31:3f:ab:33:a7:
12:29:93:f3:b5:f0:e8:1b:1d:d8:1d:fb:1f:72:25:
04:de:df:1e:04:65:b1:9b:d9:d9:fe:23:74:6b:c5:
45:c7:dd:17:32:73:a2:4b:44:4b:d3:6f:76:8b:a7:
90:fd:10:d2:10:65:27:d1:f9:b3:11:b1:d7:1f:e5:
c7:85:31:e3:9f:45:8b:53:12:0d:98:46:05:c2:b9:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:0E:7A:D9:D5:97:E4:AA:25:D6:65:DD:7B:9E:50:BF:1A:09:25
X509v3 Authority Key Identifier:
keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:76:61:73:d8:3c:01:a9:da:97:45:9f:97:b1:2f:bb:78:f6:
64:e6:2a:ff:e0:fa:3a:49:9e:d0:48:2e:73:3f:2a:ba:07:cf:
ac:9e:7c:3c:f2:71:8c:2a:8e:69:12:37:ca:38:c5:91:a7:e6:
8e:3b:8c:60:f2:a9:ae:39:53:d3:ca:3b:a8:73:8e:d2:86:aa:
42:31:ce:cc:ff:a2:fb:e6:be:d8:32:fb:d9:6e:98:fe:52:73:
05:91:a5:a1:0a:73:e9:e2:aa:3b:f5:a2:64:c1:f0:35:83:71:
81:82:b8:20:4b:1c:cb:79:23:1b:17:60:1b:08:1d:8d:39:c7:
5d:96:02:48:23:c9:77:f4:94:3f:dc:8e:05:ef:cc:74:37:18:
24:30:82:a1:bc:d9:3d:45:07:c4:67:b7:5d:72:6c:84:40:28:
aa:c5:77:fe:5b:37:0c:23:96:15:34:0b:30:0d:51:17:3d:2f:
f9:24:b6:b5:81:d0:1b:cb:ea:16:ef:9d:a7:ae:e5:fe:4e:95:
30:88:43:ae:96:ca:5c:b2:9d:80:8e:9e:5f:5f:90:f3:77:c5:
d3:ad:f5:71:ac:8f:a2:7a:9f:3d:1e:c3:bc:aa:fb:40:c3:49:
94:13:6c:9f:71:4c:b6:a7:09:54:a7:c0:12:0b:4e:d9:07:21:
e4:38:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:22 2025 by rpki-client