Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier: 5QGQdvt+zlFmB3fUCfTkdSVEC+acjIOLP4ESh0vzsxA=
Subject key identifier: D0:70:F4:BE:4A:63:24:C8:8D:5A:1C:28:BE:35:B1:74:61:AE:77:78
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 0194BBCE5A53A78A0E2F7A0319C14048BD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: aqSAw0Pl60g2tolDPFCjpWBhIH4hU2tyqsRjBzlHwmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5a:53:a7:8a:0e:2f:7a:03:19:c1:40:48:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=d070f4be4a6324c88d5a1c28be35b17461ae7778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:88:ad:09:ed:9e:0b:30:14:ac:20:89:b2:
ec:86:c8:99:c9:94:b6:a8:3e:e8:c9:e7:80:74:75:
7f:7e:c7:71:ec:43:9a:32:6b:ba:67:bb:3f:bb:19:
6d:21:ab:35:27:38:a8:bc:78:3c:75:4f:9b:d3:ba:
51:dc:82:6d:86:d2:07:59:f4:f4:ff:f3:fd:ad:90:
0b:5c:e4:3d:88:83:16:dc:a5:39:6a:25:76:53:a7:
24:94:31:c2:5a:ec:0f:ca:f6:e8:71:53:d5:ba:51:
a5:c9:b5:7f:bd:04:7d:68:02:7f:3c:a0:85:40:8e:
76:5f:9a:37:92:bd:ad:81:b5:39:8d:93:4d:3f:62:
f3:20:6a:8e:b3:74:78:5c:61:87:0b:cb:7d:4b:77:
d7:f7:cf:99:4a:57:c2:ca:44:3c:ba:e2:c8:68:ac:
f8:74:71:dc:07:43:b9:62:55:48:86:f9:5f:df:55:
68:f1:64:fe:da:f6:d4:79:fe:61:9d:b8:b2:1a:b0:
39:b2:df:b7:a4:a8:33:11:05:28:92:36:dd:25:68:
c4:48:50:80:71:ba:12:d4:01:e1:80:e6:4d:e3:fb:
56:58:c7:33:f7:da:cf:57:b4:7c:64:23:87:48:bf:
61:a0:35:ff:23:81:ff:87:60:1f:79:97:2e:9a:22:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:F4:BE:4A:63:24:C8:8D:5A:1C:28:BE:35:B1:74:61:AE:77:78
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:34:e7:34:f2:51:60:d6:a8:40:f9:a8:48:c0:42:1c:43:
3e:2a:7a:2f:42:f6:87:0e:bc:b4:db:99:54:9b:74:1a:3b:5e:
12:87:cd:bf:2b:2d:ba:df:a6:f1:68:33:9d:f2:70:8b:13:48:
49:ae:d0:44:43:2b:f4:26:c9:42:71:72:7e:3f:eb:75:b2:15:
b1:79:53:2e:5f:74:9b:9f:7f:fd:11:1c:ae:d3:5f:f5:75:ba:
b0:7c:57:54:5e:39:c0:91:1e:b7:65:6d:b4:61:f8:5b:72:90:
a9:78:82:7b:be:53:39:cb:9d:10:0d:a9:08:c6:25:9b:b9:48:
86:86:bf:8f:eb:d8:d0:57:f8:5a:3a:63:0f:15:2a:b3:38:ca:
de:67:a3:c9:da:70:99:a4:67:00:7c:fc:1b:71:8c:64:59:41:
96:57:e6:a2:5e:f4:2a:f8:6d:cd:77:44:f6:55:0b:c2:fa:5d:
37:21:bd:b0:b3:c1:39:fa:8c:b2:cd:6e:04:97:d3:5c:1d:e5:
a8:af:6f:1f:63:ef:59:4b:13:47:76:c1:66:70:5e:68:7f:5a:
84:f4:8c:b2:ee:5c:f6:fb:85:25:a4:2b:62:d9:37:7b:6c:37:
08:e3:b7:f9:b3:20:35:ef:2a:a5:0c:fa:73:34:09:ab:38:68:
5e:66:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:41 2025 by rpki-client