Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: PN45FNZBbzeavI/tww+eTOkVfh+vd4rI2qm+J+MYGXk=
Subject key identifier: 2C:F6:D9:9B:9F:12:86:C2:AE:D8:C2:65:6C:DB:56:00:59:98:9A:9B
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 0194BBCDC36E7B147F20BF8295F193EAA1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 0C60
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: vPBj61ajatDbm88IFSnopm31zZ1/Riv8XIsjBGaS7/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:6e:7b:14:7f:20:bf:82:95:f1:93:ea:a1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=2cf6d99b9f1286c2aed8c2656cdb560059989a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:0c:10:d1:7d:4b:03:b0:e5:6e:b6:d7:fc:
fb:d4:53:f3:2e:97:ec:a1:64:97:4e:62:d5:6b:c6:
f9:46:c4:38:3d:f3:49:ad:8c:f9:4d:42:62:71:b7:
43:45:e2:e9:a9:99:f3:88:9c:5a:d5:d3:13:4e:34:
d7:50:4f:45:2b:b1:c1:01:69:e9:96:f6:b9:9a:c3:
29:49:78:2c:c2:37:e3:ee:79:8c:47:da:f9:dc:a3:
18:da:2d:0b:f0:83:00:c3:76:ef:91:26:5d:04:8e:
01:f3:37:64:e5:d8:50:e6:64:a9:f5:7a:aa:16:29:
f7:5f:7b:9c:f8:8c:e8:11:b4:37:32:63:a7:45:fd:
f7:09:1e:bf:95:8f:4d:ef:a0:0c:a9:fd:b3:ae:72:
ec:d5:4c:32:51:f6:58:d4:57:4d:18:fe:04:84:a2:
76:94:3f:13:f5:91:aa:09:26:cd:c2:78:34:f4:7e:
7e:9a:25:a8:4c:67:5e:9b:dd:49:79:26:d5:4a:cd:
3a:61:1c:87:7c:8e:fb:fa:af:ec:a3:5b:a9:37:02:
c2:89:bf:80:a7:16:82:5b:82:53:44:ed:2c:1b:e3:
e9:5b:db:ec:61:4f:f9:19:6f:9a:81:7a:80:70:86:
b6:11:93:58:cd:98:cc:e0:34:55:c1:aa:e9:f2:28:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:D9:9B:9F:12:86:C2:AE:D8:C2:65:6C:DB:56:00:59:98:9A:9B
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d3:fc:45:6e:e0:ec:c7:b6:bb:a5:a9:f4:34:8c:3f:8b:b5:
ef:84:b3:12:6c:d9:3f:18:f3:07:fb:5d:f9:b4:24:1a:36:ba:
d7:57:f2:47:09:c6:ff:4f:d7:18:74:ae:5a:dc:7c:cd:1d:ee:
33:20:5d:ca:a6:69:c2:66:fd:da:83:ba:bc:77:0d:db:5d:33:
61:73:9b:81:49:bc:46:d7:57:b2:40:6e:a9:13:17:08:01:83:
60:10:36:09:4e:a2:3f:db:f2:0e:29:ab:d6:6d:ff:21:63:20:
ad:e2:35:fe:1e:d0:78:5b:78:06:b4:14:6b:bb:87:4b:a8:1f:
8c:5b:77:09:8f:bd:38:f5:c1:b4:39:be:08:a0:66:93:ef:30:
7f:b8:f4:a5:25:ef:5b:9e:94:41:40:6b:58:81:57:81:da:6d:
86:d6:f9:9d:eb:d0:40:0d:d5:ce:73:b6:cb:cd:6c:cd:a3:13:
b1:a4:ea:60:64:a2:53:ec:88:a2:a7:15:df:e4:71:6c:ed:df:
60:62:fc:0b:40:bb:f8:09:fb:d8:c4:e2:a9:38:ad:48:10:00:
f6:26:41:55:44:3e:1f:f7:53:47:10:66:af:f7:2a:36:14:41:
e5:42:e6:18:8f:83:1c:9b:55:9f:81:05:b7:b6:96:3a:32:14:
b9:b2:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:50 2025 by rpki-client