Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: uS5TZTevkw7l/iZNWLIB/kX8u9PR9uK+opCT0ubtd80=
Subject key identifier: 56:36:4E:AF:EF:CE:25:A4:A6:DB:92:0C:53:62:9B:6A:29:CA:84:E2
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 0194BCA9BF358C4DDE216EF27B8DF53961DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0B44
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: +bESriWG8kH1DxkjjSJIJwl3SXv02Rc69THInj5XkSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:35:8c:4d:de:21:6e:f2:7b:8d:f5:39:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=56364eafefce25a4a6db920c53629b6a29ca84e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:2f:fe:96:e1:a9:d5:66:9e:52:90:d7:cc:
47:c1:65:ec:27:8c:e6:4d:eb:6a:f0:ac:41:c6:1c:
03:ad:58:27:55:ba:39:21:b2:25:c9:1f:aa:d5:d7:
ab:00:94:0e:80:81:7c:9d:35:1d:a0:43:e2:22:82:
81:95:fb:1b:12:b0:44:42:e8:5e:01:ad:fd:d9:52:
e2:0d:83:f9:74:96:3c:a2:f2:2e:f5:b8:6f:9d:76:
98:de:e9:ee:79:e0:be:75:fe:cc:cd:ba:3f:19:43:
94:3a:95:56:c9:7e:3f:cf:25:03:cc:e6:eb:91:2a:
b3:44:15:da:97:98:18:3c:fc:d8:05:38:0e:81:72:
6e:f6:80:72:a8:12:aa:a8:78:3f:ac:57:9e:87:e9:
66:5b:7f:9b:09:85:01:eb:d1:5d:e1:e4:11:7d:b6:
7a:c7:0c:fa:5a:4e:70:30:6a:83:14:ab:c6:a5:b1:
d0:a1:da:f5:4c:0d:f4:7e:df:00:5f:12:ed:0d:ba:
4b:db:ba:2a:08:a4:43:12:fe:80:71:c5:bb:a2:a6:
97:ad:bf:80:21:67:a4:f6:89:2e:32:3b:8b:7e:c0:
ed:ba:4f:1e:fe:89:ce:01:be:45:22:b9:7a:44:12:
3a:13:4f:7e:50:fd:9f:a3:b3:4d:a4:bb:fc:a3:65:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:4E:AF:EF:CE:25:A4:A6:DB:92:0C:53:62:9B:6A:29:CA:84:E2
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fc:0c:b6:c0:f4:57:2f:29:c8:3a:b0:6b:46:27:37:7b:07:
e2:89:d0:04:bb:ec:69:ee:10:a1:90:d1:39:15:30:fa:c6:26:
b0:19:b1:b3:42:95:2c:f0:a7:01:c4:11:75:f8:33:a8:d8:66:
b8:73:cf:35:c3:10:2c:95:83:ea:6b:29:89:5e:a4:0a:1b:12:
18:18:be:63:7c:a3:2e:a1:05:97:dd:c2:42:ee:43:44:68:f7:
28:2c:e2:64:68:99:1a:00:7f:59:e3:d2:82:b4:12:71:d0:2d:
81:1f:6b:6e:74:34:8f:e9:68:75:03:d6:f8:50:f9:5f:06:db:
ef:61:70:40:b8:12:34:39:8b:f8:ff:11:dc:ca:a4:83:4e:60:
c0:2b:f2:e8:6c:e4:d3:d3:5e:f6:38:8a:bc:42:fa:a9:be:20:
84:11:d6:cf:f3:9f:8b:1b:bd:f3:9c:f2:16:da:47:9e:fd:f9:
f8:5c:3a:a2:cf:3f:00:4b:0e:c1:61:92:a2:74:f1:69:c0:e7:
f2:85:ad:d8:68:f9:ad:ad:b3:3c:24:47:94:fa:24:10:ba:24:
ca:57:d6:01:38:07:3d:77:a9:d5:be:32:0a:a0:e7:45:25:7e:
ed:e5:19:b5:0b:e4:77:ab:a3:40:71:ad:4b:a4:a9:0f:61:58:
32:bd:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:32 2025 by rpki-client