
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d757c0-89c3-4669-85b8-423104770552/1/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.mft
File: aAlRXQk2RGeHA8Ak2SAUxTLzFuo.mft (raw, json)
Hash identifier: M3kZN1y5IkuLkbNXZ9kggwL5+kuUpf53t9goFGvjZ0s=
Subject key identifier: 6D:4A:41:41:7F:81:0D:17:CE:F2:0C:4F:48:88:C7:66:9A:9F:0E:FA
Authority key identifier: 68:09:51:5D:09:36:44:67:87:03:C0:24:D9:20:14:C5:32:F3:16:EA
Certificate issuer: /CN=6809515d093644678703c024d92014c532f316ea
Certificate serial: 0194BCAA2D6F8A410348B15B13C97A2EAAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d757c0-89c3-4669-85b8-423104770552/1/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.mft
Manifest number: 1029
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: aAlRXQk2RGeHA8Ak2SAUxTLzFuo.crl (hash: uNWL5+8f2sT895CciaxmPLYZWHbFHpcTd72MTO6vt1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2d:6f:8a:41:03:48:b1:5b:13:c9:7a:2e:aa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6809515d093644678703c024d92014c532f316ea
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=6d4a41417f810d17cef20c4f4888c7669a9f0efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:40:eb:e0:a5:c0:11:bc:c9:8e:83:5a:39:
85:4a:08:6d:ac:7d:f8:66:d3:38:4b:b7:7b:4c:04:
06:78:69:94:d8:85:2f:f9:e0:fc:76:8e:64:60:c8:
d4:76:5b:b0:78:e3:13:8d:3c:48:56:19:be:a3:90:
a7:e8:55:b7:4f:9f:6a:87:a3:7e:1d:55:b0:52:f8:
9c:a3:36:2c:b5:38:63:d5:f2:0e:84:6a:a1:05:f1:
5d:c5:b1:74:18:22:66:f2:e0:12:8c:c6:13:17:72:
59:1b:90:8e:32:0d:44:4c:4a:de:58:8b:cb:f4:7c:
6c:e9:10:cd:b0:ed:b1:ff:93:33:f7:86:3b:71:73:
c2:c7:0d:c4:0d:f8:7c:d1:bc:43:6e:f2:89:0e:fa:
70:a1:29:d4:7a:50:c6:64:30:f4:f3:1d:7f:77:57:
88:84:2b:20:e3:9d:4b:00:bb:ab:3f:a9:a1:3e:c6:
63:fe:a8:ca:50:03:3a:d0:7a:29:c0:a1:bb:57:3c:
1d:65:6c:e4:08:ef:82:87:25:18:20:06:02:af:55:
de:c1:e1:bb:b5:32:16:e7:90:a7:36:47:15:ee:1c:
ad:69:0c:a1:21:90:fc:3d:b4:31:44:d4:53:bd:b4:
9f:5e:3d:92:c7:11:5e:02:da:78:1c:f2:76:26:e4:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4A:41:41:7F:81:0D:17:CE:F2:0C:4F:48:88:C7:66:9A:9F:0E:FA
X509v3 Authority Key Identifier:
keyid:68:09:51:5D:09:36:44:67:87:03:C0:24:D9:20:14:C5:32:F3:16:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d757c0-89c3-4669-85b8-423104770552/1/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d757c0-89c3-4669-85b8-423104770552/1/aAlRXQk2RGeHA8Ak2SAUxTLzFuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:63:c3:c6:85:a6:ba:eb:3a:71:8c:c5:31:9f:7f:66:26:75:
ec:c4:7b:7a:85:22:9e:7e:de:c7:59:d8:2f:87:a0:35:59:c3:
7f:ba:b8:1e:7d:ad:95:8d:81:c2:ef:df:1d:b4:c4:79:64:17:
e1:2d:22:46:b5:93:5c:75:64:68:d9:88:08:6b:75:67:4d:dd:
31:20:b0:b1:d2:eb:ee:8d:92:26:20:b4:b4:7f:3d:91:91:d3:
6c:45:36:c4:41:3c:b9:0d:23:02:91:a7:78:1d:5a:9e:fb:d9:
06:c7:b0:78:4d:c7:c7:a9:6e:7f:39:60:d5:79:c3:c7:12:03:
37:02:6a:14:49:51:c7:c9:3e:d8:c7:01:7a:29:11:04:f0:a1:
d2:bd:9a:36:6e:59:21:b9:26:cf:9c:af:9d:22:a4:dc:b5:d8:
47:ae:12:b0:0c:de:ec:e8:92:3b:1c:f8:8c:42:35:0b:58:b6:
c5:fe:90:4d:f3:58:36:a0:d7:5e:eb:e4:d4:26:6b:87:f0:41:
ff:22:ad:ad:35:91:b4:de:39:8b:e0:26:36:3b:ae:a7:ac:43:
9e:e2:ac:d4:1b:f6:83:a6:2c:17:76:f4:f6:b5:ba:21:5d:47:
2c:ee:e1:ba:95:b6:03:88:16:a7:b3:c5:48:9a:78:c6:4e:48:
30:2a:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:50 2025 by rpki-client