
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: SApy2RQyzDwAS8/piNNW0M7rjL3DAj8i+471BYDo4nY=
Subject key identifier: 54:6F:17:33:1B:51:F6:11:85:DF:BD:42:A5:BC:B1:C7:D5:BE:23:0D
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 0194BBCE9EB58AEBE83851A6F9393378A010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 0CEB
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: oGb9vHKPKOVlkhVmVMu5HIyeCj5Po6H+R7+EV+wRBCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:b5:8a:eb:e8:38:51:a6:f9:39:33:78:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=546f17331b51f61185dfbd42a5bcb1c7d5be230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:c6:f9:48:78:58:c0:d7:48:bd:53:8e:ed:
ef:97:ab:53:d4:84:75:d7:52:ac:8a:fb:10:21:ba:
7b:ef:a8:ee:cc:15:e3:58:8f:54:44:2b:3c:93:03:
df:07:7e:10:5a:a8:79:d1:e1:ef:85:a5:ae:96:f1:
80:65:64:86:f9:87:44:38:04:66:e7:a2:64:eb:d8:
30:93:22:38:5d:84:3b:08:56:41:28:ee:1b:d7:26:
c6:5f:ee:60:01:72:9b:b9:b1:d6:6f:6a:62:e2:bf:
71:0c:1e:d3:d3:7e:e2:b2:0f:7d:33:0b:64:ec:50:
c4:6f:f0:2b:97:b7:80:85:43:3c:ac:57:ce:6c:e1:
0b:90:e8:f2:27:f8:c6:39:d1:02:78:35:49:74:e1:
04:6c:cb:a7:b7:f7:78:53:4a:15:79:ab:d3:bf:94:
43:e5:8b:cd:2d:e7:c8:b7:f0:60:d4:b9:29:77:72:
f3:88:ac:99:99:c7:59:84:28:e2:b8:c5:9e:94:0c:
aa:f7:2a:48:29:18:a8:b0:91:9b:9b:f0:b4:ff:10:
3a:50:ba:31:60:2d:f9:bd:37:c6:b6:c7:ac:72:8f:
5e:9a:ae:db:a9:7a:60:e0:71:ba:fd:94:35:ac:23:
f0:67:91:d1:c0:7d:31:0e:0d:e9:96:88:32:19:dd:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6F:17:33:1B:51:F6:11:85:DF:BD:42:A5:BC:B1:C7:D5:BE:23:0D
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9b:c8:04:e8:55:9c:ba:4d:dd:36:9f:36:14:e3:87:4d:ec:
61:0b:f9:d1:5f:f5:fa:10:8d:ed:20:f3:38:08:de:69:a7:40:
59:10:77:03:24:6f:04:4b:9e:2e:1b:b0:29:10:b1:24:7c:cc:
38:25:57:ad:49:21:3e:55:24:ea:c9:02:d7:ff:45:52:4f:4c:
59:e6:bc:5c:7b:bc:7f:b0:f7:a9:4c:1d:2d:94:fd:a7:b4:b4:
c4:06:fa:70:d7:30:42:cd:8d:6e:d8:7e:e4:36:f9:44:b9:77:
46:e9:c0:17:a8:34:29:94:8b:4b:e1:6e:ad:18:d8:b7:86:49:
15:31:b6:01:82:45:46:d2:00:e9:18:9b:57:7d:e1:f0:21:c0:
bf:d5:ad:2a:fb:44:3b:bc:c7:fe:8a:13:49:4a:cb:f8:67:0a:
d8:b8:9a:cd:5d:d1:2a:20:ed:c4:0c:13:3b:ce:26:48:46:94:
ac:24:11:02:96:c5:f3:64:1c:26:7a:96:9b:f3:4b:b1:ac:a2:
7a:49:e4:79:84:d5:2b:5e:4e:75:25:38:af:0c:a8:91:d3:19:
8a:dc:4d:3b:e8:5b:74:a0:9d:68:45:8d:bd:2f:e5:ef:51:b5:
80:5c:d0:8c:5a:a7:76:66:94:63:28:70:1f:4e:bd:29:6b:75:
3a:a7:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:26 2025 by rpki-client