Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft
File: aPw7CfVvin8ea-PJTw8IikKiy1s.mft (raw, json)
Hash identifier: 17rWarUzFM0iKdlflCvmuQUWf9a/7YRSqX+mwnPAvlg=
Subject key identifier: 20:A8:46:F0:ED:AB:6D:24:DA:CB:60:5A:67:8C:55:B8:CA:86:13:02
Authority key identifier: 68:FC:3B:09:F5:6F:8A:7F:1E:6B:E3:C9:4F:0F:08:8A:42:A2:CB:5B
Certificate issuer: /CN=68fc3b09f56f8a7f1e6be3c94f0f088a42a2cb5b
Certificate serial: 0194BCA9D6A01A4C9FFF9F0E89CFB7DF767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPw7CfVvin8ea-PJTw8IikKiy1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft
Manifest number: 05E8
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: aPw7CfVvin8ea-PJTw8IikKiy1s.crl (hash: lAwL1m60xzfCru5Pbj+h5Uc4yPRoX9b7E60HBjaMaQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:a0:1a:4c:9f:ff:9f:0e:89:cf:b7:df:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fc3b09f56f8a7f1e6be3c94f0f088a42a2cb5b
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=20a846f0edab6d24dacb605a678c55b8ca861302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:d6:4d:63:59:a7:e3:74:6b:9d:83:5f:e3:
66:50:b6:92:54:38:43:df:45:f2:b2:5a:84:89:2d:
13:95:39:10:c2:f8:bf:45:0d:2b:21:8a:75:f9:e7:
96:ce:fe:24:2c:a3:7a:e3:74:fb:d7:64:ad:e2:c0:
b9:20:98:87:97:4c:1e:47:0b:32:53:64:4f:2e:0e:
da:4f:84:2d:34:b9:1b:e5:be:72:2b:07:c8:7d:e0:
7d:b9:34:c3:e6:e4:19:4c:e3:de:9a:fa:21:5e:92:
ad:2c:21:e1:c9:9a:a2:7f:68:69:4b:72:d9:8e:8c:
9d:68:32:16:ee:fa:ba:fe:e4:b1:31:fe:f0:82:36:
48:98:20:55:09:57:34:73:93:d3:f3:8f:63:b4:49:
d3:f1:ee:de:a2:3c:82:57:fc:d7:0b:12:e2:69:ab:
09:7c:1f:0a:ca:56:4e:6e:19:53:0a:cc:f1:a0:ea:
1f:95:cc:29:57:e7:ea:0d:3b:e5:37:d1:2c:32:84:
14:33:f1:1c:15:2c:ee:2e:81:ca:72:50:c7:83:30:
ac:b8:50:3b:d9:03:40:7b:a1:38:66:c0:9e:84:d2:
13:83:64:55:85:ed:0f:dc:d1:e2:f3:3b:39:4c:c1:
a1:41:5c:29:6e:f4:35:89:60:8a:68:3b:a2:33:3b:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:46:F0:ED:AB:6D:24:DA:CB:60:5A:67:8C:55:B8:CA:86:13:02
X509v3 Authority Key Identifier:
keyid:68:FC:3B:09:F5:6F:8A:7F:1E:6B:E3:C9:4F:0F:08:8A:42:A2:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPw7CfVvin8ea-PJTw8IikKiy1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36b9b1-6ab6-470e-aa43-c8534a3c9498/1/aPw7CfVvin8ea-PJTw8IikKiy1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:29:ae:a5:28:9f:fb:d9:68:9b:80:42:8a:8e:77:57:43:
98:e7:c5:4c:f2:bd:19:47:41:46:32:4a:d4:51:59:f3:18:e0:
0a:fe:90:89:fd:24:e5:5c:63:01:64:01:82:3f:47:4f:ae:76:
72:a5:61:fc:14:ac:a6:0d:52:c2:75:2f:18:fa:d2:59:71:07:
54:a9:25:f9:a6:2e:37:0b:e6:60:97:13:83:0b:66:66:a8:23:
4e:f8:e3:fe:dd:6b:a9:b6:31:61:3f:7c:1a:ba:a5:e9:04:bf:
18:df:2e:bc:c5:24:07:41:ed:c9:04:1c:3b:5e:81:5c:53:ca:
59:ae:69:5d:b7:52:5a:2d:7d:1e:61:49:e1:c4:04:bb:d4:22:
84:4b:27:a6:96:60:b0:a9:f6:26:50:a0:06:bf:bb:a0:d0:87:
17:56:7e:63:34:bf:c9:02:1d:fe:9e:74:f7:e8:d2:e8:83:eb:
16:05:90:71:9c:db:9a:96:dc:08:05:88:a0:bf:88:8c:05:75:
05:da:0b:7a:4c:43:73:9c:11:e2:14:ef:75:40:5e:ac:ef:e0:
7b:09:d0:e2:2d:5c:b3:2a:44:b1:21:19:84:6a:2c:67:77:3c:
c7:9c:df:0e:eb:b3:84:a7:36:71:f6:6b:42:db:a3:48:97:d1:
fd:dd:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client