Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
File: AMe7gqYBJXucgs_3rHkz81E6TUk.mft (raw, json)
Hash identifier: k9BPpR1iXkY/1+QkZZDlDlDqABykrH5jET7hNlJwHPo=
Subject key identifier: D2:D5:56:60:66:9B:E2:B6:21:B7:8C:45:EB:B0:E8:4E:A8:55:F8:85
Authority key identifier: 00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
Certificate issuer: /CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Certificate serial: 0194BBCDDBE5653FAA2DA8D8FB6B858EAD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: AMe7gqYBJXucgs_3rHkz81E6TUk.crl (hash: LP9x1QgyMDlTN8R8fJsqVp54/oIVusMo/96Lf4BFOFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:e5:65:3f:aa:2d:a8:d8:fb:6b:85:8e:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00c7bb82a601257b9c82cff7ac7933f3513a4d49
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=d2d55660669be2b621b78c45ebb0e84ea855f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:bf:48:49:f8:62:28:ac:77:8e:ad:9a:ae:
a8:56:e5:f7:e8:fb:ca:06:67:a3:4d:4f:5e:47:bd:
b0:8f:6b:06:13:80:df:f1:05:ed:14:10:b9:5e:cd:
5c:8f:47:2f:7d:e0:bb:ba:d4:87:99:5a:b4:06:67:
d1:98:69:79:dd:e3:12:d5:e2:89:22:89:ba:a8:dd:
2c:58:8a:74:06:7a:e8:4b:e0:f0:d2:0e:9e:15:c6:
d4:20:53:1a:81:7e:78:11:52:46:e1:4a:00:d4:da:
b2:bd:b5:24:08:24:99:1c:fa:de:21:83:1c:df:de:
e7:b3:22:8a:90:91:c4:4d:14:fa:bc:05:54:ae:eb:
ff:2c:00:3e:31:6e:f0:92:4c:11:c7:8b:2a:2b:e0:
73:86:b6:4c:6e:94:05:94:17:13:d5:88:1c:bf:ac:
06:9b:f6:e8:7a:7c:83:bc:ba:9b:90:33:a4:72:36:
ec:25:f0:4f:5b:98:e8:ef:68:86:bf:b2:e0:b9:00:
e1:eb:31:e1:71:33:c6:b5:7d:51:52:b2:61:48:db:
23:4c:70:5b:c8:c9:06:37:81:fd:dd:b9:cc:2d:6f:
20:54:d5:35:3d:be:31:95:c6:cd:cc:be:ea:ba:3c:
f7:87:0f:cd:b5:97:56:dc:5f:fc:82:3f:42:c5:ba:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D5:56:60:66:9B:E2:B6:21:B7:8C:45:EB:B0:E8:4E:A8:55:F8:85
X509v3 Authority Key Identifier:
keyid:00:C7:BB:82:A6:01:25:7B:9C:82:CF:F7:AC:79:33:F3:51:3A:4D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMe7gqYBJXucgs_3rHkz81E6TUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b623d8-af62-491a-9f9f-1216226c6fb5/1/AMe7gqYBJXucgs_3rHkz81E6TUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:1e:73:bb:c5:7d:f0:26:ab:bf:11:6f:24:f2:a4:99:86:
cc:b0:53:cb:ab:32:44:78:19:38:89:53:81:aa:97:27:10:85:
b1:c1:b7:a7:ed:96:fc:55:ee:d1:71:1f:f6:98:56:df:fe:40:
98:17:20:4f:2e:b2:d8:c2:68:7c:03:b1:d1:7f:5c:ac:00:8f:
3c:0c:9c:ff:43:04:95:40:33:8b:b9:14:69:dd:4f:16:3f:5c:
93:cf:bc:93:fa:37:9c:2d:9e:55:58:7f:c8:80:f4:bf:83:ef:
a9:18:11:02:11:94:79:c2:6f:50:6a:bd:7e:ba:4f:df:27:2b:
d1:89:c9:87:fb:c5:57:6b:27:00:c3:c6:f1:91:ab:c5:69:3c:
60:da:e5:6d:32:e5:5b:d6:c8:00:3d:72:24:b4:25:eb:5c:4c:
a2:79:78:94:45:cc:e4:b2:6d:be:d5:c8:ce:80:7a:34:21:47:
fa:8e:1f:7d:d9:1e:97:de:07:81:8f:a7:7f:71:c5:0b:45:90:
47:81:b5:9d:9a:fc:6a:4f:a9:7f:d5:ff:55:fb:d6:95:d5:69:
c1:1f:26:af:73:d1:d7:bc:2f:cf:18:46:8b:b1:0c:f6:5e:75:
24:2d:6e:17:3b:42:22:97:60:46:ee:22:7b:7a:cd:36:e6:df:
2d:87:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:41 2025 by rpki-client