Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: MpeqJH60okDhNC6WiFIM2DRgmW/C/CJsyfubBgryHA0=
Subject key identifier: AC:65:61:17:F4:A1:DE:35:5C:1D:72:D0:B1:13:06:F9:80:D2:32:B3
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 0194BBCE2574EF1B7CE5E8AAF12D27310548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: 6ELfQbKiDwlm8r7IXVTylykj9lYR53BvhAzRved9Oig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:74:ef:1b:7c:e5:e8:aa:f1:2d:27:31:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=ac656117f4a1de355c1d72d0b11306f980d232b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:be:62:8c:87:b0:dc:0e:1b:b7:75:66:3d:
6c:78:0e:1b:bc:65:03:7f:81:9f:25:ae:82:e7:22:
e8:6e:75:de:20:bd:70:8d:63:46:05:c7:73:a1:49:
4e:88:ab:0b:1f:24:c4:5d:30:37:82:06:5e:f2:64:
f7:27:2b:ba:79:04:7a:d6:97:06:f1:7d:60:4e:00:
98:9d:eb:4b:a2:49:3a:86:d9:5b:0d:45:4e:26:cd:
a6:60:ff:15:2d:4a:e8:59:fc:b8:d5:ad:bc:3d:cb:
ea:b9:c1:41:5a:18:3b:8b:c7:72:66:f5:7b:42:36:
42:19:18:1f:92:a1:6e:44:68:44:ca:ad:ee:7a:2c:
e6:9b:03:ee:48:13:2e:d9:61:1a:21:b3:a3:08:5d:
c2:1a:12:78:c1:62:29:0f:58:85:7f:9c:25:4e:a4:
89:ba:89:22:64:89:98:34:75:e1:d9:80:47:7b:4b:
25:e2:8f:d2:fd:72:00:9b:5d:9e:34:18:b6:3d:ff:
1a:ff:d0:e4:a4:f7:c1:54:7f:30:a9:b6:4e:8c:b5:
56:71:b1:26:54:83:be:71:31:e2:ea:0b:df:55:be:
75:b1:ac:96:c7:09:3e:c2:63:9e:8f:d9:89:66:63:
4f:1d:e2:50:85:11:5e:ef:ce:a1:bb:80:40:25:e3:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:61:17:F4:A1:DE:35:5C:1D:72:D0:B1:13:06:F9:80:D2:32:B3
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cd:1e:7a:79:0a:22:69:3d:3f:ae:06:ca:f3:b3:5a:97:dd:
71:11:2b:76:8c:fd:1d:01:6f:26:1e:dd:6a:df:9f:36:4b:d8:
0f:bf:63:7e:ae:aa:5b:28:38:a8:2c:8a:71:e8:db:f0:8e:f0:
7a:ba:6f:d6:32:bc:ba:57:b6:dd:ca:f5:45:8b:c9:bd:cc:d2:
70:9c:70:11:1b:63:c5:32:22:c3:d8:9e:97:e2:c8:38:6d:3c:
c5:b4:25:32:c4:4a:b1:4d:c3:e4:96:c7:6b:7a:48:d4:e5:d8:
4e:c4:d8:c0:55:91:e1:39:1e:ba:b3:ab:15:b6:86:52:24:a7:
84:08:9a:6f:06:eb:0d:f4:80:05:cc:71:2f:97:2a:d2:36:16:
17:76:da:60:38:b9:dc:cd:b6:e3:dd:1d:ea:6b:ea:9d:50:49:
77:cc:34:6a:a3:ad:e6:b3:ed:5d:22:2e:d6:cb:4c:5a:a3:92:
ec:9c:41:f0:ba:0c:8e:1a:ad:dd:e5:8b:e8:0b:7b:b9:3c:d6:
bc:ee:36:f0:10:e0:f7:b3:6a:46:c8:1a:90:24:e9:91:6a:11:
b3:b4:0c:90:6a:0c:7f:d1:f6:c7:c5:b9:00:b5:0a:db:b7:9a:
6b:73:c9:af:2b:50:72:a8:9f:2b:e1:c3:8a:78:ba:be:8c:8b:
fa:a4:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:48 2025 by rpki-client