Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
File: aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft (raw, json)
Hash identifier: m2Q636BMJjaxMjEhVKFF1NVzPxTOYaw8jL9Z52sq7SM=
Subject key identifier: 71:FF:5E:DC:EF:E7:B5:28:85:67:10:33:2A:C9:00:D0:3A:38:DD:AF
Authority key identifier: 68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
Certificate issuer: /CN=68a7472d53284095905ade203caf911cd1ac1771
Certificate serial: 0194BC72A4ABE3E7747C2A26DC195048C181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
Manifest number: D0
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl (hash: biTOho16LUlDnDG2wHP/HB6Jfk9vK/q69bUHUVCeNjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a4:ab:e3:e7:74:7c:2a:26:dc:19:50:48:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7472d53284095905ade203caf911cd1ac1771
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=71ff5edcefe7b528856710332ac900d03a38ddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:f3:eb:e5:e5:c1:ef:99:74:b7:ae:08:8a:
a7:5b:7b:b3:f4:d5:79:ff:9a:60:72:f2:d3:31:0a:
0c:e9:bd:66:e5:f4:fb:5a:54:92:e5:b1:39:f0:c1:
bb:42:e0:6a:a0:38:43:ca:42:02:2d:1c:40:30:bc:
e2:c6:0e:52:9f:db:45:98:61:db:36:7e:db:da:02:
97:6d:78:50:0b:62:b3:5f:23:30:91:8d:2a:19:c1:
0c:92:b7:40:ed:9d:4f:8b:f4:f4:83:da:da:b5:90:
45:c8:01:a0:a7:63:e1:d9:50:a1:37:d5:4b:f6:a6:
af:bd:7f:e6:4b:14:fb:47:2d:30:66:40:e0:03:e9:
97:20:29:34:02:02:71:c6:e5:12:b7:c3:ec:9b:e8:
e7:44:70:1c:07:5d:8f:8e:23:fe:ab:d7:9b:f9:81:
0b:0c:8f:1d:3b:b3:ac:9a:59:11:89:08:8d:29:4b:
b5:4d:51:d7:fb:96:2b:be:27:91:48:65:d1:f4:18:
69:26:63:61:ea:7a:81:4a:f7:c8:fc:00:45:14:d7:
f0:af:82:ea:9f:35:3b:ae:3e:07:2c:e1:2a:03:08:
09:0d:17:ae:f3:91:03:a0:48:de:d2:a6:3c:ce:2e:
0b:bd:3f:56:58:9b:0e:bb:25:49:fd:7a:0a:0b:09:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:5E:DC:EF:E7:B5:28:85:67:10:33:2A:C9:00:D0:3A:38:DD:AF
X509v3 Authority Key Identifier:
keyid:68:A7:47:2D:53:28:40:95:90:5A:DE:20:3C:AF:91:1C:D1:AC:17:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKdHLVMoQJWQWt4gPK-RHNGsF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/35953e-adc7-417c-9011-38cad359a540/1/aKdHLVMoQJWQWt4gPK-RHNGsF3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:6a:c4:a1:03:27:87:59:c2:e4:e6:f0:3c:f2:e2:ce:29:
c1:24:eb:b3:24:78:9f:b9:e2:20:e9:28:b1:68:e1:a0:b3:ba:
bf:b3:f8:39:17:34:78:7d:cd:20:c1:21:7c:bc:27:73:b4:30:
bd:3f:e9:ff:85:2e:94:c3:02:6d:cb:d8:28:95:82:30:8a:08:
09:b7:f8:aa:79:8c:df:3f:26:99:fc:b7:13:19:f8:04:91:53:
c2:43:da:b0:ef:db:c9:e8:3c:2b:30:03:8b:a6:f6:f5:79:45:
f0:0c:90:a6:ef:15:fc:b0:85:53:ed:d9:5b:9e:5f:06:06:54:
03:c8:12:46:03:ea:be:63:56:ce:c4:4a:b3:c2:00:de:7d:d3:
9b:df:82:98:ee:1b:07:00:65:ea:90:65:36:f7:fd:55:bb:d3:
e7:fb:10:df:09:ca:14:dc:a6:17:bd:99:2e:dd:dd:2e:bd:95:
3e:9e:de:1b:bb:32:9b:7e:c5:74:5c:40:58:52:9d:f4:67:d8:
d1:64:ef:41:04:e2:2a:34:b2:67:14:57:bf:66:ab:9d:a2:02:
8b:5c:9c:a5:2a:48:35:2c:44:38:da:c7:23:34:f2:eb:3b:2a:
16:ab:9e:a6:1c:49:37:48:0f:2c:8e:c9:3b:9a:80:8f:72:7f:
9c:ca:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:50 2025 by rpki-client