Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: jo1VOzNMnpNGZtKUCXFFDhc1kWK3osBncZ+xTgeFNYc=
Subject key identifier: ED:83:08:4B:0B:9E:50:E0:E6:E3:C4:E4:F0:40:5C:85:72:29:EE:93
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 0194BBCED46AD81387DF290C3BAC3EA468C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: nmi47OktUQBZZtKZGEUvKdPmJsDgOy3NJERN9S57Z94=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d4:6a:d8:13:87:df:29:0c:3b:ac:3e:a4:68:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=ed83084b0b9e50e0e6e3c4e4f0405c857229ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:c9:81:82:a7:82:6a:51:67:64:da:80:97:
b7:db:15:7b:f9:06:d3:3f:fc:83:98:70:df:9f:78:
0f:4d:aa:e6:f1:c1:52:a4:17:00:db:74:d6:f8:79:
47:ca:69:4a:72:dd:cd:cd:46:69:32:cf:6e:d1:cb:
ce:37:5c:9e:0d:e0:5b:a2:86:40:d1:b7:1f:7d:89:
b5:67:70:7a:f0:93:c6:38:7e:93:c6:47:35:06:26:
9d:c7:a9:ee:5f:67:d9:d0:ff:11:fb:02:a8:cf:22:
e6:81:45:78:3f:38:d9:ec:b0:3c:95:1e:2c:c4:1c:
c4:f3:e6:9a:e4:b1:80:3d:0e:66:e8:b8:c5:49:0c:
08:08:f4:ab:0a:fc:fb:b5:66:a5:02:39:1a:79:c2:
18:be:c6:5f:6e:ea:c4:37:df:49:eb:9f:f4:76:3f:
5e:43:89:c2:54:20:2a:6c:ff:33:65:2d:4a:3a:23:
f6:7e:c5:88:a0:a4:68:17:10:af:2f:5e:d3:90:ed:
57:02:57:98:ac:80:18:bb:da:12:0e:00:2f:9b:a4:
b4:f3:cb:49:59:82:9f:01:2f:b3:3a:1d:94:a9:93:
e0:3e:74:14:ba:da:89:fc:40:c7:c1:73:b6:6f:05:
d6:10:c1:d2:7c:36:30:f0:c1:e2:92:4e:6d:96:e6:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:08:4B:0B:9E:50:E0:E6:E3:C4:E4:F0:40:5C:85:72:29:EE:93
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0b:bc:8f:4f:4b:2f:b3:69:39:34:9e:47:4c:77:16:2f:6e:
1b:17:33:a1:7f:d1:99:bd:63:45:90:51:78:46:9b:79:76:47:
64:70:b0:5b:77:10:51:b6:01:da:ce:cb:c7:83:36:54:0f:f3:
c4:ab:56:72:28:b4:99:bd:24:f0:4b:40:8c:fe:97:39:b2:1e:
d9:af:42:25:8e:56:d1:12:0f:4e:4c:db:ec:8a:de:d0:78:fb:
d6:e5:d8:48:d1:66:6d:1c:a7:f7:7d:cc:a4:61:e9:7f:5a:bc:
da:1e:ec:c5:85:a1:e7:77:77:ee:37:a5:02:8b:22:8a:82:0c:
d5:78:94:e3:f1:3d:f9:ae:09:40:dc:a8:80:82:50:c1:77:3b:
49:0d:78:bf:15:e4:6e:c0:b9:4c:b8:a3:fb:72:24:75:17:01:
ce:d4:b4:ff:ec:74:a4:9b:32:1e:e2:45:b1:13:10:8a:89:ff:
79:21:30:ca:a6:57:8e:0c:9c:65:be:09:f8:10:bc:29:39:a3:
5c:8c:07:91:61:41:4a:d2:a7:99:77:6f:7e:e2:80:bc:6f:55:
57:da:df:14:bc:e5:5f:61:3a:50:7e:85:da:58:34:82:67:4f:
6a:a7:94:72:0e:93:54:89:e7:3c:54:8c:c0:82:16:df:13:9b:
ae:e7:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:40 2025 by rpki-client