Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
File: AZYrnNLlVrWW_HJDVlgHueLchoo.mft (raw, json)
Hash identifier: vHs/mRzc8MPCsdacDMZYKNTtdKZ1WLjMhjZ52ag+rBo=
Subject key identifier: 06:8F:F7:39:C3:42:FE:11:FA:8E:B8:81:BB:4E:5E:C6:10:4F:35:D2
Authority key identifier: 01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
Certificate issuer: /CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Certificate serial: 0194BBCE8512EFD282DCD8C592CD0C167E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
Manifest number: 0533
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: AZYrnNLlVrWW_HJDVlgHueLchoo.crl (hash: gY5zR2BTpy4sRWMw18meWbL8dZfMXU2AdqIifhg/HDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:12:ef:d2:82:dc:d8:c5:92:cd:0c:16:7e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01962b9cd2e556b596fc7243565807b9e2dc868a
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=068ff739c342fe11fa8eb881bb4e5ec6104f35d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:5f:b8:83:84:cd:3c:00:cc:64:0d:e0:e1:
29:47:1f:88:f9:a5:eb:c1:03:8d:e3:06:00:f8:f9:
46:33:c3:6c:f5:e3:17:98:99:67:6c:ea:2c:21:93:
56:d0:e7:69:a4:04:6f:c6:14:7f:fb:9e:32:ee:80:
f7:55:f7:94:9a:84:34:c0:40:cd:1f:94:cc:96:42:
be:97:13:b9:ff:cb:68:69:d5:2e:b1:0b:93:e4:14:
be:20:28:89:fb:72:ae:d5:57:be:b2:99:5c:31:87:
5c:fa:48:4f:a5:26:5b:1b:f3:5e:40:9c:c6:86:c6:
e9:56:0d:55:fa:e7:ed:21:9e:f6:8c:62:19:76:ff:
bb:22:4c:7b:2b:5e:c4:62:f0:1d:16:22:f3:d1:5e:
75:1c:8c:ed:01:cc:34:04:5f:99:70:75:df:79:72:
ba:ca:1c:73:b6:f4:07:be:f3:a5:e1:7b:a1:34:d1:
ce:1a:04:6d:56:ea:2e:6b:0d:9d:33:c8:29:cc:b6:
6d:4a:1b:68:96:28:94:83:60:59:1c:01:70:09:f0:
69:1d:e5:70:6b:d3:d9:f3:80:0f:bb:fe:76:33:90:
0d:87:4c:90:12:95:e3:cb:4e:9e:12:76:a6:d3:19:
40:c2:34:54:41:0a:bf:49:04:76:9f:ce:8d:3c:8f:
0c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:F7:39:C3:42:FE:11:FA:8E:B8:81:BB:4E:5E:C6:10:4F:35:D2
X509v3 Authority Key Identifier:
keyid:01:96:2B:9C:D2:E5:56:B5:96:FC:72:43:56:58:07:B9:E2:DC:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZYrnNLlVrWW_HJDVlgHueLchoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e21b69-9df9-48a3-a1e1-70342a2e7533/1/AZYrnNLlVrWW_HJDVlgHueLchoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:bc:f5:84:35:3e:9f:32:e4:88:12:e4:ac:b8:be:6e:ff:
87:cc:35:fc:ac:85:53:2a:ba:cc:be:81:31:78:62:db:49:f3:
b7:f0:d4:f3:a7:1d:e6:a4:d7:85:70:81:4d:ce:b0:66:2c:f8:
2c:d1:bb:7d:d6:78:48:1a:b2:06:9d:20:a4:f7:40:42:7f:44:
45:19:f8:10:84:ac:c8:58:e8:da:74:e9:16:a3:7b:32:97:6f:
06:92:d2:a6:e1:60:5a:e0:20:e4:db:74:73:56:ec:44:c6:f4:
e5:fb:6c:3d:84:a3:3d:a1:10:89:16:c2:b4:a5:7e:79:4c:7b:
c9:c9:be:43:c3:a7:bd:6e:4e:42:75:9c:61:65:ab:8e:83:2a:
c5:61:14:e2:81:f8:1d:4c:58:91:1d:54:68:2e:7a:cd:e0:84:
9d:8a:f6:4c:8a:67:4f:3f:a3:17:03:18:73:74:09:bb:61:0c:
7d:5b:57:a8:97:ef:d4:44:46:30:6f:fc:fe:f9:d5:99:24:57:
aa:2f:c6:19:a1:52:c2:3b:a9:d9:49:a5:7a:fe:05:0c:b1:75:
6c:a5:37:dc:47:03:ec:75:c7:60:f7:c2:32:28:3b:c9:e7:a2:
bf:d0:b8:59:25:08:eb:14:31:e5:6c:84:d3:34:bd:40:6f:84:
5a:b9:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:39 2025 by rpki-client