Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: UjtC3k8qMPJsHmFlinjP2liq7ffJDx5cOVm0aM9m3S4=
Subject key identifier: AA:C6:4C:AA:28:D6:90:D5:75:A5:30:E1:35:F3:39:F2:FE:F9:A8:F2
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 0194BBCE107BFFBFE47A4D7CB29038AF4F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: akWKDF7sFDjcN+M+Yj1NZ3bQgIDwBJ2/P0YTfoIKK14=)
2: c3cfCpPele1fDi8UyS3_TO9IOZU.roa (hash: x4G7KBYVMCONibc2Rol9WiF29BGQsdbC/SUMmPlKdpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:7b:ff:bf:e4:7a:4d:7c:b2:90:38:af:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=aac64caa28d690d575a530e135f339f2fef9a8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:ec:99:d7:4e:41:6f:ce:cb:9d:53:5a:6f:
7b:ed:33:75:82:d5:dd:87:d7:66:b7:e2:44:e4:fb:
4e:f0:ca:93:68:f4:43:d8:48:1a:00:08:46:73:30:
c3:e9:65:ce:f6:32:65:51:6b:57:39:9e:3f:98:de:
85:f4:32:e5:52:e6:93:0c:e0:d5:57:89:15:5b:d9:
90:77:1d:b3:8f:4a:47:ce:22:5a:60:53:b8:ce:58:
e2:be:b2:c2:04:00:2b:63:53:bc:ad:d9:c6:57:35:
9a:31:c2:12:3b:95:dc:86:13:39:3c:32:7d:19:f2:
80:4e:32:f9:4c:b3:b6:a0:d8:a4:d3:44:6d:b8:33:
c9:92:33:0d:27:be:05:cf:0c:2d:2f:fa:64:81:8e:
b9:97:48:7b:70:90:1e:8d:71:45:10:5a:7b:01:ad:
89:33:d3:8b:3e:79:eb:25:4f:72:6e:6c:b5:78:96:
57:4a:7c:aa:8f:5c:2e:24:72:a1:f5:fb:d1:20:e1:
0c:bc:c1:96:90:5b:02:81:43:3f:8b:6e:d7:dc:54:
59:7d:45:dc:cc:09:7e:ba:71:6f:a4:c1:67:59:97:
3e:58:62:7c:b3:b2:14:f9:66:23:bd:5a:c0:24:6f:
ac:e3:54:94:e3:bc:c6:aa:7f:81:f6:e1:08:2e:50:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:4C:AA:28:D6:90:D5:75:A5:30:E1:35:F3:39:F2:FE:F9:A8:F2
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:bc:a8:0f:a4:9a:f4:10:3a:08:d0:e6:9d:48:23:be:3a:
b7:91:46:c1:99:35:61:4a:74:f2:be:ef:87:90:b1:be:e9:27:
41:a6:9f:d8:c6:14:ee:d7:17:dd:9a:7d:8f:12:a5:0b:ff:c9:
c6:45:76:18:f8:c3:69:8a:7c:f7:d5:4e:c0:48:ba:f8:14:73:
fb:f8:85:6e:ad:c7:46:93:7d:9e:31:38:12:e9:51:33:a5:4e:
f8:a9:e9:a4:b3:28:18:fe:b7:01:30:7b:ff:3a:6b:a7:25:f3:
de:09:8c:5c:6b:fc:4f:e6:dd:7a:f9:42:a3:ca:ff:92:34:99:
46:f4:86:15:50:1e:8d:ae:51:63:8a:93:70:26:ec:be:3e:82:
1f:2f:b8:00:04:a7:b1:c6:41:62:19:ea:c3:8e:cd:f9:84:bc:
1e:8f:40:d8:04:c8:d3:6b:38:87:33:59:4a:09:35:05:fb:bb:
eb:76:b1:19:52:d2:a7:90:0e:49:28:17:fc:86:ed:30:7e:48:
30:b7:f7:99:b2:6c:98:9e:23:81:d6:35:25:0c:f6:ff:0c:ee:
f7:3a:08:d7:76:e9:22:58:45:d7:de:49:8a:61:72:95:87:d3:
2b:c7:c3:74:34:f5:d5:3f:de:51:a1:98:89:a4:4c:b0:8d:8b:
1e:d8:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:16 2025 by rpki-client