Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier: f7uV0v+3b5GZyMDBnliqzn0+5XRJC6kkCExWOGMLFzs=
Subject key identifier: 65:38:79:A6:A3:69:E8:21:DF:09:46:9F:FE:E0:A0:C5:EC:21:13:C1
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer: /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial: 0194BD17D95BD70A65277FAEFA86EE17F685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number: 130C
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: AGXEro1Rq9JgFeA5vpq1f10xO39TqCeEG5k/eXqKi9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:5b:d7:0a:65:27:7f:ae:fa:86:ee:17:f6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=653879a6a369e821df09469ffee0a0c5ec2113c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:cd:ae:1d:13:a2:56:fe:f6:9e:e9:72:00:
d3:a9:00:96:e5:33:41:98:ca:a9:97:ca:af:2a:31:
19:80:e7:5f:ae:8a:8e:73:72:65:0f:40:04:f2:22:
b1:d4:d7:5c:8c:aa:53:b1:ba:2f:39:51:05:52:83:
b7:ef:27:2c:ef:d7:3b:f4:52:59:35:30:b9:9a:0d:
3f:c2:1a:5f:fb:b1:81:7b:6e:23:dd:24:ce:7c:91:
0f:e8:8b:03:2f:d3:a7:64:7e:29:ce:7a:ad:db:35:
c2:50:48:8d:70:fa:51:8a:8e:a1:dc:f9:97:2d:13:
04:dc:82:6c:14:d9:db:60:90:6e:10:ea:2c:33:a9:
72:55:32:2d:59:3a:b7:1a:87:89:8e:93:1a:31:4b:
e5:0e:37:85:9a:db:f3:c2:a2:30:23:c1:93:4c:44:
6c:59:85:e7:56:74:48:b1:5a:1b:94:1d:af:ef:6d:
18:d8:03:85:f8:14:42:45:35:e6:42:92:ba:5e:9e:
51:b4:0c:0c:8c:3d:07:57:df:fb:b4:6b:d4:e0:c6:
95:54:40:39:c4:c6:71:76:6b:d1:e8:15:c3:ea:80:
7f:f2:94:be:99:e8:c7:06:35:14:4f:27:38:2e:b8:
fa:fd:39:ad:d3:48:10:25:03:7f:8f:77:83:25:a1:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:38:79:A6:A3:69:E8:21:DF:09:46:9F:FE:E0:A0:C5:EC:21:13:C1
X509v3 Authority Key Identifier:
keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:92:82:23:43:2e:04:fc:30:53:30:a5:bd:c0:65:58:e5:
be:15:00:0f:be:cb:7d:3d:34:96:3e:d7:a7:dc:3c:60:ae:ea:
fe:5f:1e:46:b0:fd:c2:3a:e4:a4:a8:a3:27:d9:c1:af:41:d0:
04:1a:cc:e8:05:04:9d:e7:03:d6:86:83:fe:f1:1d:a0:8a:d9:
c9:a1:01:75:76:74:c5:99:c2:ce:b6:88:f2:92:45:93:f5:2d:
72:9c:4f:f6:8e:79:59:d6:fb:04:2a:20:4a:70:d1:3f:87:c7:
91:f9:dd:c0:8c:d9:1e:3d:19:60:ad:ff:23:39:d3:3d:c1:56:
17:f1:9b:50:2e:0f:1b:90:a1:fe:dd:e4:99:4f:54:ec:97:40:
b0:3e:1a:8b:dc:b8:3b:e7:65:d9:ed:17:9a:26:04:c3:57:6e:
41:40:3a:aa:84:15:62:dd:bb:f5:32:38:62:08:d7:56:b6:5e:
b9:dd:ec:a3:d0:4e:df:cd:11:a7:90:aa:ed:8f:76:bf:28:41:
89:d1:d5:b9:18:1d:80:4a:a1:a7:b2:c0:b5:12:63:cd:af:99:
59:2b:2f:54:aa:e9:93:ca:86:a3:3c:ed:6f:e8:93:ea:28:b5:
ee:3d:1a:00:e1:04:ba:37:79:a1:2d:9d:78:0a:49:d1:fb:8e:
78:75:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:06 2025 by rpki-client