Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json)
Hash identifier: xuN9ENA+5ovHQl+hMp8ptt2Rb6blcksjxqqXmu6bG0c=
Subject key identifier: 8C:F4:66:F5:27:6A:7B:E7:42:8D:1D:12:65:45:BC:F5:49:28:DB:D0
Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Certificate serial: 0194BD176D130459C082D7D460DD4E6B56F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
Manifest number: 0B08
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: 3tWosmJR2ySbgzlHgUZ881tkyKk8QU1UHBkVwpzVu0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:13:04:59:c0:82:d7:d4:60:dd:4e:6b:56:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=8cf466f5276a7be7428d1d126545bcf54928dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:b1:ff:32:25:a7:54:43:e5:8c:ef:4b:49:
43:ce:55:a5:02:14:76:79:4e:a0:ce:87:6d:b9:4f:
bd:18:27:2c:f1:8f:ba:6b:8e:45:b7:37:ff:9c:8c:
db:3a:27:d1:5e:f9:43:e1:2b:6c:ab:6e:e2:a8:7b:
64:5f:2c:d5:3a:99:bf:37:9a:ac:ac:00:68:f9:1f:
ff:a6:05:82:35:b9:e8:69:86:48:05:87:17:4f:f1:
8a:50:76:52:d5:a8:4e:c2:1e:32:9e:99:5a:4e:04:
fe:6e:96:b5:77:61:b9:76:53:d4:57:c2:a5:5a:38:
3d:29:23:86:16:78:c2:d1:49:d9:5f:a4:aa:23:c2:
b0:ec:1b:e3:6c:51:87:38:f3:26:18:40:03:2c:d9:
b5:6e:7e:57:a6:ec:2c:87:b6:72:c7:b6:b5:7f:32:
09:df:79:d4:16:f6:f3:9f:04:3e:fa:9f:27:02:b2:
4f:78:94:60:f2:d8:14:5c:cb:31:70:1d:07:f2:05:
55:5a:13:9f:da:8f:05:cd:d1:b1:fc:8f:c5:e1:9b:
c3:c5:0d:1e:df:68:c9:c7:c9:7e:e9:0b:95:5e:90:
f3:7b:8d:3e:2d:f2:7b:13:bb:9a:3d:32:51:19:84:
51:f3:39:d7:d0:14:1a:ac:af:73:fc:3b:ed:1b:64:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F4:66:F5:27:6A:7B:E7:42:8D:1D:12:65:45:BC:F5:49:28:DB:D0
X509v3 Authority Key Identifier:
keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:04:44:f6:f6:2b:97:63:67:20:1c:1c:1d:bd:ee:51:ea:
8f:05:bd:20:19:10:d6:6d:7c:b5:4d:72:02:fc:6f:ef:e0:e2:
b0:53:1a:03:90:86:7d:d0:58:bb:20:99:33:d5:83:35:ae:12:
73:6e:99:7d:85:76:18:d0:cb:08:24:70:d9:ac:7a:b3:67:7f:
2e:c3:ca:3f:d9:78:79:fb:a2:44:0d:d1:44:d3:1a:ed:f1:05:
16:f0:a0:f3:6a:80:f4:70:66:99:bf:6d:c8:44:14:34:5d:f0:
35:09:fe:e1:a6:b3:06:ac:9a:1c:7b:9c:8e:02:cd:d8:e2:0e:
e6:c7:6f:25:e6:91:3a:5b:2f:d7:56:2b:39:a9:a9:9e:b6:df:
04:4b:9b:4f:bc:47:46:8a:ae:39:42:b8:bb:41:36:31:1b:b9:
a5:80:99:c8:32:ec:d6:16:ff:2c:da:8c:32:fb:d4:ea:cd:5b:
60:0a:bc:eb:3d:c3:db:28:ab:47:cd:8e:1c:9b:0b:2e:79:29:
b3:a7:a3:22:da:15:55:54:67:3c:09:7e:7a:d8:66:12:ac:d0:
86:13:83:73:eb:c8:36:36:ed:da:af:7f:23:7c:2b:37:2f:0c:
c6:c2:13:85:c5:b7:49:0c:af:ce:44:a5:f1:e4:b4:be:e4:2b:
55:24:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:10 2025 by rpki-client