Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
File: aesKgBz9tLWANaXQdaKQSy6qX5E.mft (raw, json)
Hash identifier: ++vltvJUltxXNKTarxr3eZl0mq1bNpej+f2rdOpoc7U=
Subject key identifier: 87:CD:EB:5E:0F:FE:94:9E:9F:E5:E1:00:AC:A1:68:41:5A:A8:EE:97
Authority key identifier: 69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
Certificate issuer: /CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Certificate serial: 0194BBCEA5873742BAC5662300662E5C9149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: aesKgBz9tLWANaXQdaKQSy6qX5E.crl (hash: uDL4YoB+8bDER5jHMSOTufLAB0WCXCM+KJ3hVpF61ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:87:37:42:ba:c5:66:23:00:66:2e:5c:91:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb0a801cfdb4b58035a5d075a2904b2eaa5f91
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=87cdeb5e0ffe949e9fe5e100aca168415aa8ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:86:0d:0a:7b:8a:6e:13:4a:16:87:2b:07:
9e:17:41:ef:bf:fe:28:91:98:94:6b:54:ec:25:c3:
08:4f:2c:9e:3a:d2:7e:ab:21:03:0a:26:32:33:83:
f0:74:b5:f1:df:ec:03:f3:0e:fd:3f:9c:53:ad:cb:
b8:a9:26:3a:a4:a1:87:72:9c:d9:ce:7d:f5:53:5c:
2d:20:ad:49:dd:dd:bd:89:84:0c:19:73:99:09:dd:
d4:54:54:0f:89:b5:58:0f:ed:7e:8b:6a:8a:85:41:
50:fe:b2:d6:1a:67:ed:73:8d:32:c2:d4:60:7c:cf:
90:b2:88:6d:b6:da:66:23:d3:94:53:2e:16:4b:ba:
e0:88:c5:1b:8d:22:b4:ef:28:72:e0:41:21:6b:18:
6c:a6:f6:36:8f:41:9d:77:71:83:be:57:8c:51:2c:
d3:34:26:79:2b:ac:cb:8c:b5:e3:98:92:4a:08:9b:
f2:40:75:42:89:4a:83:f3:77:f7:93:1f:20:46:69:
4d:51:9c:ba:3d:9f:fb:f7:13:7a:cb:d3:68:d9:6e:
11:4c:7b:ee:1a:eb:f7:c2:5e:e0:e2:b2:d4:42:b8:
d1:41:f6:bf:b2:6b:25:f4:f3:07:30:fa:2f:64:7b:
1d:a2:5d:f2:59:54:02:0d:55:83:82:93:8a:6d:ff:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CD:EB:5E:0F:FE:94:9E:9F:E5:E1:00:AC:A1:68:41:5A:A8:EE:97
X509v3 Authority Key Identifier:
keyid:69:EB:0A:80:1C:FD:B4:B5:80:35:A5:D0:75:A2:90:4B:2E:AA:5F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesKgBz9tLWANaXQdaKQSy6qX5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3bab57-db3b-4be8-b279-00f56f4721c2/1/aesKgBz9tLWANaXQdaKQSy6qX5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e1:c9:9c:4f:73:e8:ab:77:fd:14:7a:41:78:87:ee:3c:ea:
14:32:46:32:91:04:64:6a:fe:92:5f:7f:cc:7b:27:4c:33:d5:
a0:2d:a3:ab:e6:64:db:23:08:fe:bc:56:bd:12:09:6e:77:a0:
88:18:92:a5:b3:c4:12:5d:58:da:eb:69:15:7b:0f:57:72:1d:
1e:ca:3d:03:3d:e2:1c:5e:4b:44:c0:65:8a:0b:de:d3:bf:3e:
3e:44:4a:ab:c3:4b:39:6d:7a:4b:24:5b:63:70:d1:34:d5:b7:
2d:9f:66:e2:a5:0f:3a:5e:24:93:58:5a:16:b9:30:c1:5b:f8:
e4:7a:fb:6a:ac:bd:00:6f:c8:16:17:4b:1f:0a:ee:c5:d5:89:
e8:cc:51:25:aa:02:33:17:e9:e8:f4:05:a3:93:fe:1f:93:92:
de:44:60:df:e7:c2:e9:48:c7:af:77:0e:cd:c3:5e:1c:0a:97:
6b:ec:b1:21:06:7f:18:6d:54:af:84:68:a4:15:57:88:19:12:
23:c4:cb:56:4d:13:5e:55:db:0f:ff:9f:f7:be:8a:10:14:1d:
f5:c7:3e:e5:b9:87:b2:24:6f:15:25:25:4a:5c:c3:83:2e:86:
61:28:39:0f:7b:99:8f:48:87:04:ce:6f:6b:e7:02:75:a4:e3:
bf:94:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:23 2025 by rpki-client