
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: 6KPrw1feX0bw2OYmiXA/pCJj3T1HJLvyKuh2DU9JtEI=
Subject key identifier: 95:63:78:71:34:C1:36:92:17:3F:BC:9E:2F:D3:BB:8D:23:6A:E7:7B
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 0194BC3C85EE6978639C1513394F00787170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 0571
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: qIvmjEd1eR16IdR0/fiRZX3Y/h7lKWq0d+uNp9ma0xA=)
2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:ee:69:78:63:9c:15:13:39:4f:00:78:71:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=9563787134c13692173fbc9e2fd3bb8d236ae77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:64:65:a5:55:dc:4a:40:b6:31:d8:9f:a2:03:
3d:17:1d:54:49:de:59:fc:7c:a2:69:74:e9:83:3f:
63:fb:7e:e5:54:29:f9:7f:66:0c:9c:1f:a4:23:52:
3f:5b:9c:b4:23:9c:9f:6d:b5:43:67:9c:e3:c9:a7:
04:93:41:2a:b0:30:08:9c:b2:40:2e:70:f6:e5:2a:
45:03:c5:38:04:09:27:da:7f:3b:8f:58:ce:a7:f3:
ae:ca:95:53:8d:16:e2:73:ba:88:4c:ef:6b:f8:7b:
bd:f7:d6:d4:51:b3:62:e3:7a:7d:66:29:e9:8c:d6:
d8:98:90:d9:69:e5:1c:20:bf:f5:8d:3e:75:f1:a2:
eb:c1:fd:99:69:75:36:d5:f0:78:1b:29:ae:c7:99:
7b:6d:6d:38:02:cc:a7:55:83:a6:bf:2e:e5:cd:c8:
14:78:c1:25:75:e1:49:42:f9:f8:99:8f:5f:54:32:
e8:c9:14:42:e3:6e:12:b1:f2:2b:3d:f6:c8:a9:66:
b2:11:ff:00:ba:92:18:99:de:12:b1:55:19:a9:75:
20:db:dc:6a:b5:b1:56:31:14:23:b9:49:7f:cb:31:
9d:ea:99:f2:80:05:0f:9c:d1:1d:f9:d7:4b:71:48:
90:78:b6:da:23:47:51:f3:18:36:4d:ae:74:19:9d:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:78:71:34:C1:36:92:17:3F:BC:9E:2F:D3:BB:8D:23:6A:E7:7B
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:99:28:e8:81:2a:95:6a:c9:29:13:16:45:5b:78:de:c9:
9f:33:43:28:9d:a5:4a:29:15:e6:b7:56:b0:1b:c6:b6:78:30:
de:ae:eb:91:b0:4e:13:3e:e2:04:67:7a:e7:3f:9e:d7:6a:18:
82:62:fc:01:7a:bb:98:59:70:c2:f0:1d:14:a6:5b:d9:2a:0e:
c9:7d:10:8b:42:99:5f:96:d0:ce:88:c6:f3:74:a0:af:22:7e:
2f:8b:7d:6c:04:b7:b6:08:b8:c6:12:dc:0d:2b:78:ee:34:1f:
b5:b6:33:d1:92:e2:da:17:c1:cf:fe:76:ec:43:da:18:e7:08:
90:43:a5:c8:ad:3a:d6:ff:e1:90:29:35:3c:26:14:8b:e0:3a:
5f:52:81:e6:28:46:4c:fc:e1:a4:d6:93:0c:28:d3:97:a9:a3:
f3:23:77:a8:ef:a2:a0:5a:ad:d5:fa:11:e0:7b:48:4f:31:72:
ec:ef:c5:7d:97:0a:94:f1:b1:9c:02:99:af:21:c9:8c:63:89:
fc:f2:e9:40:22:e0:40:87:f2:2d:6d:43:a8:da:9a:d9:37:05:
1b:c1:dc:8c:bd:eb:15:c4:92:e4:bb:4f:a2:ce:d9:85:9e:cc:
b2:53:3e:32:b7:81:44:8b:fe:5f:af:8d:f0:5e:9e:41:a4:3b:
65:9e:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:55 2025 by rpki-client