Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: ug+rOdq6IFn3fXRJWEh00D8yIwqkeUnagSasOiiyUQs=
Subject key identifier: 7E:53:35:32:62:3A:C0:9C:E2:EC:F8:64:DD:D4:42:3D:70:0A:84:E3
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 0194BC3C3AF3F143A8C65B37669C984D49B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: dV3GH7s7W0EFrqmKD8wLAirqxsqGLW4djALi4jZnbGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:f3:f1:43:a8:c6:5b:37:66:9c:98:4d:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=7e533532623ac09ce2ecf864ddd4423d700a84e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:73:cf:af:97:b8:97:88:f0:a6:1d:5e:d2:
a6:f6:04:9c:73:cd:dd:98:4b:c9:79:c5:75:46:24:
15:12:43:10:0d:a8:1e:bf:d1:3a:81:a5:cb:29:e2:
4d:c1:e3:84:e9:bb:1f:29:17:4a:8f:7d:3e:71:fc:
78:66:08:9e:09:1d:ad:7d:16:37:c2:7a:21:07:15:
c1:64:70:d5:31:6e:73:3a:3f:33:f0:d1:53:82:20:
5b:27:27:2f:af:27:7d:d6:84:f3:3b:31:c6:1b:a9:
74:31:b7:9e:82:03:49:b9:8f:f4:5e:6c:ac:69:45:
fa:b5:b2:7a:f5:5b:6e:62:0e:70:65:9a:cb:99:80:
68:2f:57:2c:bc:be:89:15:ee:e9:ca:c2:3b:96:f9:
5e:5b:22:fd:29:22:8d:51:b7:41:36:66:82:08:1b:
d0:08:c8:a0:aa:e7:06:09:ee:9c:11:88:e5:c2:4a:
01:af:9e:24:bd:da:29:d6:7a:4c:b6:77:1a:39:fc:
e0:cc:ea:b6:f2:37:cd:fc:04:20:07:7d:66:11:db:
00:d2:28:42:79:d2:5c:7c:9f:07:52:75:dd:a9:d5:
2b:72:6e:a2:63:f2:a0:28:d9:fd:54:92:b0:ac:5a:
9a:e1:d3:ca:d6:16:d8:d4:a4:e9:6a:6d:98:d2:f1:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:35:32:62:3A:C0:9C:E2:EC:F8:64:DD:D4:42:3D:70:0A:84:E3
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:38:b5:87:c9:d2:10:0c:6f:a0:7c:2a:07:11:bb:5e:4c:
8f:f1:bf:2d:0d:d9:79:9c:7a:d2:a8:ef:2a:dc:9a:01:79:a8:
7c:6b:00:d3:bc:61:58:c5:8d:c1:b6:7d:0b:17:fb:db:74:1f:
42:93:66:29:84:1a:b1:59:ee:ca:bc:9b:3e:7c:08:1f:79:70:
af:ef:52:d2:6c:df:c2:73:bf:48:d4:51:82:25:9c:10:e0:6d:
6b:4f:0c:73:ec:19:09:1d:32:b8:c6:01:36:e9:0c:e0:4c:48:
ef:e1:30:6d:b9:4c:0b:66:e2:83:9c:64:4b:6e:e6:fb:34:48:
bd:1f:4c:75:8b:19:97:3d:ec:56:74:d2:b0:71:10:80:e6:b1:
ab:bc:b8:a0:df:a9:f6:d4:43:e1:1c:41:c0:c0:27:a3:75:c7:
15:81:3b:61:fb:ce:3d:2b:9c:67:97:1c:cc:a9:f1:db:2f:c0:
af:ea:6b:3b:aa:32:1f:1f:df:08:2e:e2:bd:c3:ac:1c:0e:2e:
7c:ac:4b:f7:8d:97:04:57:88:44:d3:ab:a6:cb:5c:c2:59:3b:
2c:0e:3c:70:3e:88:b3:6e:6a:82:e3:43:a2:13:f7:49:43:0b:
9f:d6:26:79:7d:d2:ce:94:09:81:38:9b:39:f7:8f:0e:14:a7:
9b:fc:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:10 2025 by rpki-client