Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
File: avL7pFrWUxpj0XNQFPaZgH9H-9w.mft (raw, json)
Hash identifier: uoqD0lAl7e6pnkMGtgI6a6ftGgNnZ35n4+6v7/S30Dk=
Subject key identifier: 33:56:2A:47:A3:15:F8:32:7D:21:B2:84:A7:06:B2:6A:CE:96:7D:25
Authority key identifier: 6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
Certificate issuer: /CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Certificate serial: 0194BCA9FDAEB56E2719A079890FBB400D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
Manifest number: 0454
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: avL7pFrWUxpj0XNQFPaZgH9H-9w.crl (hash: FrGCzpCr97RcGQnJcSSfkRlCGmcnybJxN1Jt1Vm3H1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:ae:b5:6e:27:19:a0:79:89:0f:bb:40:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2fba45ad6531a63d1735014f699807f47fbdc
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=33562a47a315f8327d21b284a706b26ace967d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:e6:cb:c1:93:79:4b:70:62:19:6a:5a:6a:
fd:c3:b7:c0:a9:81:a6:ad:c7:7d:29:d9:16:61:a0:
b8:f0:ae:4b:b1:ec:f1:fd:4e:31:a3:92:23:e8:39:
2f:5d:29:22:b0:2d:ef:f9:5a:e9:8c:a8:99:79:5d:
88:16:9c:17:f1:cb:d7:24:e6:c0:05:cd:05:fe:6e:
3c:37:b3:8d:ca:73:58:a6:1b:b1:12:85:2f:f2:de:
c1:c3:00:e9:d6:b0:d5:89:a0:94:52:44:4b:e6:79:
3d:64:20:69:99:f7:1c:7a:da:29:3e:34:d0:a7:44:
a6:d9:5f:37:93:f3:0c:a0:c6:cb:1b:66:05:65:5c:
81:bd:e1:4f:f1:c7:b4:b3:6e:83:47:3c:7b:02:a5:
25:bd:14:b1:84:48:f9:fd:4b:7e:f5:75:6a:48:27:
61:48:17:cf:f5:74:f9:f4:24:77:5f:9f:7a:51:8b:
82:36:d4:8a:73:bd:ae:19:ba:36:3f:3c:4c:68:bb:
4a:c3:b2:ac:6c:92:28:39:c6:c1:82:46:a4:5f:83:
b6:6c:dc:29:a6:05:75:b8:98:25:f0:22:10:af:4d:
55:0c:db:97:36:4f:ce:9a:fb:c8:38:8e:d7:c9:5a:
48:c5:b1:35:51:3c:bc:1c:ff:1a:9a:a5:1e:d9:3c:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:2A:47:A3:15:F8:32:7D:21:B2:84:A7:06:B2:6A:CE:96:7D:25
X509v3 Authority Key Identifier:
keyid:6A:F2:FB:A4:5A:D6:53:1A:63:D1:73:50:14:F6:99:80:7F:47:FB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avL7pFrWUxpj0XNQFPaZgH9H-9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/728a40-e0ee-436b-b1fb-197ec9a115aa/1/avL7pFrWUxpj0XNQFPaZgH9H-9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:cd:10:28:27:f8:07:93:cd:6e:5e:80:ea:4b:bd:33:39:
e0:f4:37:e5:69:d8:eb:d4:88:2a:88:6f:48:80:4e:cd:10:d8:
c0:9b:3c:c1:56:7f:41:68:e1:24:74:3a:31:b0:6b:43:c0:d4:
03:96:9e:94:97:72:ea:a7:f0:b0:06:0c:25:df:a2:72:75:a8:
0c:57:03:ef:03:05:12:b2:e2:d6:8d:78:f8:9e:77:3c:06:31:
1b:d1:5d:6d:a9:23:09:5a:f8:aa:cd:82:30:59:9e:4e:43:e5:
90:93:43:22:69:73:63:36:cb:4d:c7:e2:31:9f:fc:5e:56:a0:
b3:b7:99:1a:89:93:f6:b9:7c:4b:92:97:a5:d5:aa:85:8b:3f:
09:e4:e4:2c:56:02:ec:57:e1:27:59:69:83:8d:91:a0:fb:34:
16:d8:58:f1:24:f7:82:1d:e5:07:bc:95:38:90:f0:c5:05:fc:
93:a9:64:de:9f:ab:15:3c:d3:e3:b9:ec:49:85:f0:92:1c:3f:
de:37:18:30:32:3e:e5:fd:65:75:cb:f7:66:c0:69:f7:a0:b9:
9f:6e:4e:a5:5d:e0:f9:2d:52:56:5c:52:4d:cf:44:34:cd:bb:
cd:a2:e7:b8:98:54:c7:64:7e:1c:c7:04:36:61:3a:05:13:3b:
68:98:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:12 2025 by rpki-client