Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
File: aUSJSM9NjazkdxjA9yWe3usJPns.mft (raw, json)
Hash identifier: 2DpsxIOgKfNaAMYtv5gQj980WdELUoF6JFDxzpPAwmQ=
Subject key identifier: 0F:7B:9E:7A:DD:FD:C9:AB:6C:5D:50:64:B0:76:CC:2C:B4:B6:87:07
Authority key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
Certificate issuer: /CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Certificate serial: 0194BD1790F7694C627DA8922A50E05FD9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: aUSJSM9NjazkdxjA9yWe3usJPns.crl (hash: GlY767zc6g2DASCkER97GZ1mtKAjqQ5XrTbWxTmlj3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:f7:69:4c:62:7d:a8:92:2a:50:e0:5f:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69448948cf4d8dace47718c0f7259edeeb093e7b
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=0f7b9e7addfdc9ab6c5d5064b076cc2cb4b68707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:90:04:e7:e2:cc:a1:46:06:d4:14:7a:94:77:
65:6e:c2:a5:4b:20:17:b4:fa:fd:37:46:f4:8d:f7:
47:e9:b2:3d:0c:70:dc:01:78:0d:b6:0f:50:db:a8:
09:6c:1f:da:44:58:9e:aa:01:18:ce:ac:37:4a:74:
71:f3:de:5e:df:97:ae:7c:45:e1:7c:21:ec:48:97:
2c:0f:fd:f4:47:1d:3a:9d:d7:c7:87:b1:b7:9c:2f:
25:dc:91:f4:d4:56:76:00:8e:3a:74:73:88:fd:34:
d9:a6:eb:40:61:d4:03:b0:e1:c4:03:6d:b0:3a:69:
10:d5:74:46:a1:b6:3b:8f:60:ed:9b:35:06:8a:f0:
2d:a0:b0:37:83:3c:1b:79:be:6d:0c:f2:5c:a3:68:
a5:7b:1f:f1:a0:73:d7:2e:09:3e:ce:19:c0:a5:02:
5e:ab:33:a3:84:e7:ab:85:ea:52:df:46:0e:7c:9b:
f1:33:b8:55:e7:d8:88:aa:1b:1f:e2:d1:73:7f:3f:
fc:01:bd:db:69:b6:8e:9c:02:08:9e:6b:80:69:b0:
d1:49:80:4c:71:88:cd:69:f9:33:9a:2e:91:d0:eb:
28:0c:27:61:e8:33:7f:47:df:9d:0b:44:0e:7b:c1:
16:b5:9c:0a:da:73:64:5d:f1:ab:19:32:1e:92:60:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7B:9E:7A:DD:FD:C9:AB:6C:5D:50:64:B0:76:CC:2C:B4:B6:87:07
X509v3 Authority Key Identifier:
keyid:69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ab:0a:91:2a:e3:7c:2b:9e:25:23:1c:3e:37:db:0f:41:bf:
ba:f2:bb:91:61:38:a7:9b:de:ef:a2:b3:a5:6a:06:09:c8:03:
8b:8d:0b:9c:02:f9:51:b3:b4:fd:90:b2:bf:0c:74:2e:9e:2d:
c7:d5:4e:b6:0d:e4:42:38:8d:c9:67:1a:84:bc:a6:40:ad:0a:
0b:97:60:74:fa:4f:9a:07:04:09:ac:ed:dc:92:23:9c:17:5d:
2d:50:ec:3e:76:fb:04:64:09:8c:2c:84:17:07:ca:3c:ca:84:
f3:6c:b4:e8:ca:80:1c:6a:06:d1:c4:e9:7c:dc:93:27:6a:a6:
2a:ad:5c:e5:ad:79:f1:41:c9:92:2a:67:1e:3e:e2:46:16:40:
f7:85:3c:d8:27:7c:90:16:d4:4a:1f:b1:c0:2a:d9:1d:bc:2c:
43:e3:b6:83:46:58:2f:b3:73:43:9e:c4:02:93:c1:51:16:04:
11:91:9e:0b:bf:02:87:c2:7b:10:34:1a:fb:d0:01:0f:ce:84:
b8:bf:74:0c:10:bd:ea:68:30:65:b7:6e:c1:e3:23:3c:3e:fd:
1a:10:48:49:be:2c:08:95:54:81:e5:3f:a7:a7:78:fc:8f:df:
95:89:73:32:bf:14:d8:9b:bf:92:05:c8:34:f2:ea:ce:86:58:
5b:8c:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:51 2025 by rpki-client