Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: 8QT+TQKLlKAInKUlBd61dHne6n8juTnvuWIjfdUH6iE=
Subject key identifier: B1:98:50:E8:BC:6E:42:68:68:0F:71:B6:2E:AC:82:BE:E9:85:9D:03
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 0194BC3BED84CA3729C9A0091B69B6C30F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 1257
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: e7PcUmEZORtGJf+sK52fpgwwv5DoRcAocieg2cX8mjY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:84:ca:37:29:c9:a0:09:1b:69:b6:c3:0f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=b19850e8bc6e4268680f71b62eac82bee9859d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:92:d9:a5:58:b5:0d:f9:5b:e6:e3:97:9e:
48:56:d2:cb:40:0d:1f:b4:5c:6d:41:98:9e:39:d5:
4d:3a:da:26:0e:dd:cb:53:88:94:ef:a0:10:8d:8f:
3c:0c:00:11:0c:26:55:c1:17:c5:15:85:5c:a5:17:
80:c8:1e:01:7f:fc:e0:c4:91:5b:2b:47:d5:ed:94:
9d:4a:9e:2f:a0:4e:ec:fd:19:d8:ba:10:73:8f:c5:
10:15:b0:ce:a0:b0:62:9e:68:bb:09:b6:04:33:55:
bb:d3:7a:ff:70:c2:69:1e:fa:11:f1:d2:bb:a0:71:
d2:2d:46:a1:17:f2:91:0f:f0:6b:19:ae:2c:9a:cd:
f8:a0:58:a4:1c:b8:e5:61:65:28:06:86:65:10:67:
f7:13:8d:31:7d:dd:3f:4f:f8:dc:65:f8:16:90:7c:
be:f1:1e:b2:c6:9b:48:64:d4:9b:e5:56:10:f8:b2:
e6:f4:47:68:e2:ae:73:11:e3:ab:5d:f2:e9:3e:5c:
15:85:19:f1:46:f0:4c:48:83:a7:99:80:1b:05:3b:
d6:fa:0b:67:6d:1a:44:30:11:e6:30:66:cd:a1:06:
5b:33:66:90:31:13:3d:aa:f1:d3:d6:d7:d8:7a:51:
be:ff:8a:72:9d:e2:f3:a4:28:fb:67:22:6a:5e:16:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:50:E8:BC:6E:42:68:68:0F:71:B6:2E:AC:82:BE:E9:85:9D:03
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8e:04:83:09:92:66:d5:49:e3:32:5b:5d:dd:14:76:38:f8:
26:03:06:f3:ce:5f:b8:76:64:47:1a:21:c8:05:c6:80:11:58:
b1:2d:7b:ff:87:47:eb:14:7d:0f:6d:fd:5b:b0:2f:4a:42:c5:
54:3a:a6:f5:3d:ad:30:01:bb:ed:d1:c3:e0:ec:39:ae:25:98:
56:dd:73:ce:f6:e5:cd:4f:64:0b:c3:5c:6a:ce:45:78:f7:6b:
cf:e2:b9:77:a8:50:f5:89:da:61:46:e2:a9:14:1e:aa:cf:03:
11:4f:c6:6d:3d:a3:35:c7:3f:eb:b1:e8:eb:a4:45:ce:76:d3:
70:86:f6:eb:f3:92:35:c7:dc:5d:e9:40:a3:10:54:3f:65:cd:
3f:6a:0b:fd:3f:06:9f:d8:4e:65:23:dd:b2:05:2e:0f:31:29:
de:20:dc:3d:de:5a:36:7a:fd:6c:ae:aa:1d:e1:9a:b4:29:e0:
6a:f0:46:38:e2:35:6b:07:7f:0f:c0:b3:15:16:88:eb:d7:61:
e2:b7:13:1c:c3:73:6d:99:cf:ac:b7:7e:0b:03:b9:d9:7f:dd:
e5:44:13:33:43:9b:af:48:17:2a:96:7c:95:5f:fd:fd:54:5d:
a2:59:6f:8d:ae:6c:b6:f1:b7:44:5c:39:fe:f7:c5:c8:bd:41:
6c:ec:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client