Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: wzRFmCCZT/m8W5tomCFNsfMX3BsPqrpXL6sMHvcIi7U=
Subject key identifier: 3E:91:9D:49:BC:F6:54:CC:A3:F0:3B:AD:B5:FC:E6:FF:B6:8E:BC:4A
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 0194BBCED943EC89C8C65848A02B117DC299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0AE3
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: BBKJk6gboCLfX9KdY6R5xOnHvJ8hVGPs4KS1UCyHCg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:43:ec:89:c8:c6:58:48:a0:2b:11:7d:c2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=3e919d49bcf654cca3f03badb5fce6ffb68ebc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:8e:7d:19:40:91:e7:e0:b0:fa:f1:90:df:
1b:f6:63:0d:b5:30:99:9a:36:0b:21:c8:c0:89:81:
32:53:4e:fd:2b:fd:17:38:b9:e3:f3:06:c9:48:6a:
58:cb:ed:4f:70:cc:90:f4:54:a6:c5:bc:4a:19:c1:
4a:24:c7:e6:5a:dc:2b:88:1d:49:cc:73:a9:e9:e9:
84:f4:5c:9b:6f:08:e4:7f:20:51:8e:7c:58:22:c9:
ae:77:16:2b:f1:1e:20:a2:4b:4a:ff:b9:bc:de:8d:
fd:8c:0d:ed:b8:78:9f:a2:f4:16:e1:3a:cc:d4:23:
d5:dc:b3:6e:5b:95:c0:40:ec:1c:2d:b0:df:0d:62:
67:51:5e:74:67:20:d7:4d:a8:f3:ae:9b:d0:2c:10:
8e:ae:00:5f:1a:ea:4c:b2:1b:14:e3:5f:c6:c4:ba:
55:fa:ab:7f:67:3e:12:b0:de:42:65:a2:79:04:55:
6e:61:b7:8e:a9:e7:3b:87:9c:96:ee:d6:8f:23:29:
7e:32:81:a1:45:f6:93:33:ef:59:0b:b0:81:9f:a7:
79:54:e4:84:d0:54:f9:ec:b8:bd:0e:3f:31:d5:b0:
1e:e8:56:3d:5e:cd:89:39:5d:11:1f:bb:69:32:0a:
00:c8:0d:d4:36:da:3b:d3:26:b1:80:a1:29:4d:13:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:9D:49:BC:F6:54:CC:A3:F0:3B:AD:B5:FC:E6:FF:B6:8E:BC:4A
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:8f:8a:dd:9b:9c:8a:6b:10:83:c2:a6:e5:a7:85:4e:ea:95:
26:59:4e:28:dd:1e:87:7f:96:b7:66:4a:f2:32:84:7e:3f:33:
30:05:c1:ae:48:a1:8c:4c:44:e1:76:51:99:8b:89:0d:e5:74:
f3:f6:52:a9:b3:fa:1d:e7:67:fa:75:ff:73:b1:ca:21:2e:22:
00:1b:c5:9a:90:f2:1b:9e:8f:ac:26:4e:f5:3c:4a:6a:37:1f:
5d:ab:7d:7e:49:65:4a:43:88:2a:89:fe:18:a2:cc:35:d7:bf:
3a:80:f3:c3:57:34:d1:67:b9:c7:77:3d:52:1f:7e:82:ec:6e:
e8:11:32:2c:35:fe:11:ee:34:7d:8b:c2:97:44:8a:1e:8d:e7:
d5:f8:24:e2:a8:df:ac:99:d2:bc:47:dd:61:d5:ec:59:a1:7c:
e4:77:dc:82:7f:27:37:65:87:98:4c:c7:35:e5:c5:f9:db:e7:
fd:dd:26:f1:94:41:c1:fa:62:bd:1a:5c:fe:09:52:a9:38:12:
37:bf:c6:d6:60:d2:2f:9d:d0:41:e9:fe:b1:e1:71:4b:b5:fb:
27:ac:af:93:aa:63:75:bb:55:6b:84:61:0a:0b:82:70:4d:cd:
be:92:b6:e3:30:19:4a:00:5c:46:2b:44:95:44:89:95:93:0a:
1f:5b:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:47 2025 by rpki-client