Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
File: aajmjRKuKTryNpBDzVmgINrCQGI.mft (raw, json)
Hash identifier: zoOvhIDPElhimSMi+2yVQPwfKJh0aIPVuM/lNkYzPAA=
Subject key identifier: F7:4C:D8:CA:84:F3:64:4C:0C:E8:D1:27:72:E4:AB:79:5F:FF:95:33
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 0194BC3BC9299DA3AB295C480DEA98CA6046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
Manifest number: 091C
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: aajmjRKuKTryNpBDzVmgINrCQGI.crl (hash: WP7FW7DeBrNnK0YQSphWo7t9iUnwxNkp19zclYMiyXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:29:9d:a3:ab:29:5c:48:0d:ea:98:ca:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=f74cd8ca84f3644c0ce8d12772e4ab795fff9533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:dc:03:20:3b:df:1c:1f:8d:4e:f9:d3:d3:
ea:0d:aa:46:e8:9f:2f:76:54:a8:9f:5a:5a:0b:7d:
bf:48:16:14:f9:ac:b0:d2:8a:7f:6b:43:97:b8:d3:
34:0d:87:b9:57:3a:7e:98:a5:ae:ca:14:86:d1:20:
9d:70:3a:19:01:3f:4b:5e:37:b9:eb:bf:ae:f0:3f:
b0:82:02:44:9e:93:9d:a2:c0:a4:75:ea:82:68:fa:
2b:0d:0b:f7:62:77:a0:d0:28:8f:0f:f8:a2:fb:d6:
f4:b2:20:e0:ff:6f:5b:a7:e8:5b:6b:a7:b0:eb:e5:
89:29:60:c6:11:bd:f6:41:50:b4:0a:be:24:48:0d:
98:12:4e:af:b0:18:49:51:1c:1f:6c:f0:c7:a8:c0:
c0:e2:81:3f:8f:89:c6:87:ec:7e:99:25:c9:e1:2a:
c9:4d:34:c6:8c:f2:a4:d0:d4:e3:78:5d:0b:07:ee:
2a:4a:b7:0f:0c:c0:0b:1c:26:48:e3:a1:05:17:97:
ba:1f:a8:97:44:5f:a0:ac:4e:45:b8:9a:31:d6:d4:
ca:6f:92:03:0e:21:1a:23:cd:67:37:0a:c5:9b:77:
96:15:61:f4:03:f4:d2:1d:df:47:da:88:93:bb:c9:
7d:5d:0d:c5:d6:9e:ef:78:b1:ff:53:1d:51:7d:39:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:D8:CA:84:F3:64:4C:0C:E8:D1:27:72:E4:AB:79:5F:FF:95:33
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:46:a3:af:f8:e7:88:43:4f:80:77:43:76:fe:d0:d8:1d:
04:10:c4:94:13:f2:79:60:38:dd:13:e8:a8:ab:8c:31:54:ab:
ac:43:3d:c8:0d:37:7f:d1:bb:ef:c5:8b:07:83:43:1f:e2:ae:
04:eb:2b:36:18:0a:97:03:88:c5:e0:72:fe:ea:d9:8f:1a:0d:
34:58:97:8c:b8:d7:5f:73:5d:f5:11:5d:ae:89:1d:e1:f1:bd:
ce:aa:22:5f:81:f3:e1:ef:7c:ec:d9:e0:34:2d:1a:cb:56:34:
69:9e:f2:63:ee:a5:41:5f:b6:65:40:cf:bb:eb:8d:fd:51:4f:
6d:d5:3f:94:96:01:fd:9c:55:a0:89:17:a2:7b:d6:a7:84:f5:
4b:59:4b:16:00:f2:17:8a:c3:22:83:e0:83:56:86:84:2e:cb:
36:54:37:13:ab:49:89:2e:6e:5b:3d:24:59:c0:68:d3:a2:d4:
db:cf:10:e8:84:65:33:66:af:8b:7d:a7:c2:2f:11:34:e1:aa:
8f:d7:97:cc:12:76:6c:ab:a0:92:7f:c0:12:3b:a2:1e:16:65:
b0:3d:d7:da:b3:ee:46:4d:9a:c9:41:7e:95:ae:10:3a:b8:37:
ca:58:8c:37:98:31:00:3f:44:7e:26:7a:ac:59:10:cb:44:c3:
63:a6:b5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:32 2025 by rpki-client