Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: HrlK8r05oaOxLyrp8NhW+fna8NmYDswCWItA24wJNwY=
Subject key identifier: 84:6B:F8:2B:3C:3F:4C:80:30:00:CB:B1:3B:73:C7:84:8D:D5:7B:12
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 0194BBCEA8E934387D708D6519FC80BB9C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: S515rQVuCrbsIU7Xj1gYMLMA8VAxnoGGawuLyLPhc+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a8:e9:34:38:7d:70:8d:65:19:fc:80:bb:9c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=846bf82b3c3f4c803000cbb13b73c7848dd57b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:43:f9:d9:41:c7:39:cd:ed:d8:31:d6:e4:
f6:a6:81:ec:ad:19:3b:a4:e9:be:5e:b9:29:92:60:
b4:98:d9:d8:47:93:87:b5:1a:4f:bf:ff:54:ed:68:
08:c4:eb:69:20:e6:95:e0:d8:bf:a1:80:ed:4e:da:
48:c2:9e:6e:71:95:d9:a3:8a:e4:f6:0a:14:cd:ce:
77:71:14:b5:48:60:61:52:9e:6e:cd:d9:ae:1f:d1:
7a:8f:2e:d0:34:ad:78:af:7e:49:31:d5:54:d5:7d:
4e:1a:d8:02:0d:5d:a6:ed:e7:5d:5f:99:26:88:a2:
45:bb:32:59:a4:b8:51:47:ad:36:62:ac:23:b7:02:
84:b5:d5:84:d0:eb:d1:db:ec:d4:72:c0:6d:63:91:
60:8c:de:f4:ae:c3:13:55:71:0f:a1:8c:5d:05:e1:
08:af:a3:43:3a:3a:d2:a4:98:6c:87:19:15:1f:ee:
04:3d:5e:2a:06:64:ce:8b:e0:3f:35:5a:da:71:27:
26:22:79:f7:d7:41:70:ef:db:31:44:3e:e8:e0:08:
27:ad:01:c1:63:20:c9:f3:66:17:8f:c6:1d:c0:fc:
24:12:1e:81:4a:45:7f:bf:6a:a3:ba:ab:c0:f5:84:
86:3a:01:c6:ba:73:75:13:49:e7:ac:fa:5f:04:c4:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6B:F8:2B:3C:3F:4C:80:30:00:CB:B1:3B:73:C7:84:8D:D5:7B:12
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:68:1d:df:f9:76:f3:f9:f5:52:52:cc:8e:2a:5b:51:52:
4b:e5:ee:8b:14:c3:c0:2f:6f:43:15:59:4b:47:0b:3b:1c:b0:
2d:9e:c8:ed:7d:b1:5e:d5:6c:50:ce:c9:5c:ec:2e:11:0b:d8:
b3:dc:fe:b2:b8:a9:7e:32:ac:99:5e:c6:55:ac:a6:cf:4d:f2:
32:1d:9e:23:2d:b1:f5:03:3b:86:89:9c:52:24:29:83:65:f3:
5f:b9:43:90:5f:15:50:84:fa:a3:84:ef:a1:e4:42:28:7b:02:
b2:0b:fa:72:30:dc:8e:68:84:45:8a:91:45:53:77:f5:ae:22:
85:dd:1f:7d:09:c4:76:8d:f0:22:d5:df:dc:d5:d0:d8:06:1a:
ff:ff:00:8a:3a:b3:2c:82:0f:4f:3e:2d:fb:23:d6:e8:b2:af:
0c:af:0e:ee:d4:54:7f:bb:b4:95:a1:d3:fe:c1:f5:c2:ac:7a:
c3:ed:21:7f:a1:e9:08:ff:8f:6b:3a:31:5a:e3:72:23:40:ab:
f5:b8:9e:87:5f:e5:11:36:c8:cf:83:3c:fc:24:0c:f9:b9:9c:
13:89:1f:d5:7f:c1:d6:46:f0:ec:64:50:1b:83:42:be:ae:aa:
af:f5:35:f3:f8:09:72:2e:87:dd:92:c8:2e:31:28:f6:ac:cb:
d6:37:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:43 2025 by rpki-client