Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File: o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier: j/LNCoSeLFFTNbeW1u4mirJtfIx5Y/0H0UYfN9FEttE=
Subject key identifier: 95:A2:3E:73:E6:FF:63:6D:44:C2:61:87:6B:97:9D:C5:D0:A1:94:84
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer: /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial: 0194BBCDD94A1D85712E65CFA9A4EB5DBC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number: 0D1F
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: hIWdztph/b3UpKYWVdquVIAX019Wt8Vd8uzuX5HJwb8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:4a:1d:85:71:2e:65:cf:a9:a4:eb:5d:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=95a23e73e6ff636d44c261876b979dc5d0a19484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:9e:da:7f:bb:e0:b3:4a:2d:17:3c:97:5c:
1b:ea:f7:1b:b2:dd:47:75:b0:f5:0c:b8:af:1d:f8:
09:32:08:b5:c3:52:e0:e4:54:7f:0c:50:08:ae:1b:
d5:20:77:83:cf:0d:1c:76:4a:c9:d1:a7:8b:06:4c:
f6:01:6d:e2:29:0e:c4:46:05:39:4f:0c:ca:4a:68:
6f:fb:7c:e7:f0:26:e2:c1:65:96:a3:e4:91:f2:cb:
2f:63:9d:37:cd:53:fe:0f:5a:39:5c:01:87:23:74:
f5:72:7f:31:13:51:fe:1e:08:39:0c:53:c9:a5:24:
2a:dd:21:60:71:21:a8:dd:c5:56:a9:df:1e:09:b8:
29:be:63:91:ca:53:8a:39:d4:d7:3a:97:1d:97:1a:
57:35:b1:0e:8f:59:1e:76:a7:6e:2d:bd:9d:b0:0a:
b3:41:a5:b6:3e:cb:a1:2b:66:f8:41:56:7c:ff:88:
d6:09:80:22:18:81:0b:58:af:8c:62:c3:38:c6:f1:
5c:96:cf:b7:63:59:de:f5:62:75:a6:fe:fd:62:f8:
c6:ad:c6:70:e6:39:eb:be:6a:39:67:74:b2:22:d7:
3b:f7:8e:d2:81:c3:01:76:47:e0:39:d2:a5:c5:19:
ba:2d:01:b3:da:68:b7:46:ee:55:ac:3c:b1:ec:c2:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A2:3E:73:E6:FF:63:6D:44:C2:61:87:6B:97:9D:C5:D0:A1:94:84
X509v3 Authority Key Identifier:
keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ab:11:3f:b1:b2:94:b3:1d:ea:3d:5c:fc:37:f8:82:98:40:
3a:3b:4c:ae:44:ff:fc:50:10:d2:cc:c3:ab:8e:50:ae:4f:a8:
16:79:0b:4f:15:89:c2:12:05:e2:f8:98:3d:85:b1:fd:0f:9b:
8b:0c:64:55:a1:34:62:98:d4:10:69:3a:78:29:e8:a2:53:0c:
00:1f:cd:58:3d:a4:ea:7c:17:d6:6f:de:3e:bb:53:b7:7c:e0:
71:13:0b:f5:d7:5a:33:fe:3f:3a:c3:c7:4e:e5:ad:94:b1:6b:
7d:d0:00:1f:8b:96:42:fa:f1:01:3f:94:ac:fb:4e:45:79:38:
e5:e7:2a:10:a4:1a:94:b9:82:71:5a:1c:a4:09:e8:98:49:79:
72:de:3f:74:8b:cd:ad:20:e9:04:30:b1:42:7b:d1:f6:91:02:
58:e8:92:5d:88:32:c5:87:64:f0:fc:a5:89:42:8a:b7:a3:1f:
65:e2:5e:e2:4c:07:aa:7c:bf:7a:3c:1e:67:21:7a:19:09:84:
23:76:86:2d:a2:ac:06:d9:0b:22:6a:3c:ea:2c:53:fa:66:99:
25:78:2f:69:51:71:5a:c9:f6:20:ff:90:0a:8e:73:5b:79:19:
56:60:76:c4:ca:27:37:f0:27:2b:57:9f:8f:b0:ef:c5:85:72:
2c:b8:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:56 2025 by rpki-client