Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: TUfNbHmN7qEUN0sDKTW4NAzQ6dKoWGfwwT3oJp2HB1g=
Subject key identifier: 25:4C:27:D7:0A:7A:82:BD:36:A2:1B:11:3E:60:66:BD:4F:08:DC:12
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 0194BD4ECBE6C99911409DCB05259B19733C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 02C7
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: 8VmimxrpNThLpVZ9dfCaKNOGeN2f38XwM4ttaj1CVKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cb:e6:c9:99:11:40:9d:cb:05:25:9b:19:73:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=254c27d70a7a82bd36a21b113e6066bd4f08dc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:1a:81:b6:98:2d:7f:54:e6:4f:92:a0:79:
db:08:cc:20:9b:30:2e:17:f3:a9:c7:9d:14:df:67:
f2:52:94:d3:1c:f2:65:25:76:30:01:1d:b9:04:af:
95:9d:32:e8:bd:d8:11:b1:b4:95:9e:e0:12:f1:cb:
23:b5:8d:c8:5b:f2:77:92:4a:e0:b5:74:74:14:4a:
5d:4f:de:a6:e4:3b:5a:f4:a6:8c:db:3b:ba:78:64:
38:c1:1e:fb:d4:0c:e6:75:3d:5a:2e:59:8b:93:e6:
1e:40:b5:f9:7c:1d:b9:0a:fa:16:32:75:a6:16:a9:
49:2e:93:3a:64:97:29:32:39:18:47:40:3d:65:50:
82:87:61:28:9a:34:65:f5:6b:00:fb:b2:cd:18:2d:
42:63:49:01:c7:c5:c7:13:ad:a3:dd:80:29:2b:b7:
21:60:1f:21:5f:d7:ee:e8:7a:af:96:bc:69:db:92:
10:07:3e:b7:c4:0e:cb:74:a9:57:1b:01:79:b8:6c:
fc:0a:12:33:59:b3:68:e1:a9:42:a9:48:19:9e:c5:
a9:3d:d6:ba:f6:4f:49:17:6b:fe:bf:1f:e8:e6:bb:
8f:ea:6c:e4:fc:57:38:7f:e9:84:88:e6:22:ff:cd:
4f:9e:74:bd:90:9d:cb:fc:d1:ef:71:79:55:16:55:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:27:D7:0A:7A:82:BD:36:A2:1B:11:3E:60:66:BD:4F:08:DC:12
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:39:7e:e7:7d:97:c5:a0:c1:d9:eb:98:fe:c0:70:e5:2e:07:
e8:36:5a:ae:c1:d4:f8:8f:3a:72:cd:8f:78:a3:67:f5:b3:06:
29:02:ed:5d:a8:bd:4d:31:32:d3:74:52:67:89:e0:78:cd:80:
0b:f1:14:1b:61:39:d8:61:39:ea:14:41:f5:b7:7e:fc:5e:9b:
d7:eb:fb:8d:fd:69:70:6c:25:67:ee:11:f2:a7:c6:7b:6b:e7:
2e:6b:06:98:53:e6:8c:7f:88:f2:7a:c4:6f:60:87:8b:ed:63:
1f:db:13:ed:e9:8c:65:41:92:7f:86:28:7e:d5:cb:94:1b:e5:
b1:3d:85:c3:8b:d9:6d:41:17:dd:2f:71:a1:dc:bf:2c:ac:6d:
a2:70:0d:db:82:0a:fa:a2:4b:a0:1a:22:77:b2:1f:c3:f0:59:
d1:dc:8c:fb:43:09:9d:c6:a9:cb:f2:f5:a4:f9:2b:cb:3a:89:
c2:74:ff:02:79:5c:11:83:5f:35:50:14:fc:dc:33:2f:2e:89:
b6:37:90:71:5f:c2:bc:19:91:4f:e1:b0:ff:2c:a4:30:12:bf:
9b:87:80:94:5d:82:b7:a8:8a:09:80:12:35:0a:58:c6:96:f6:
04:9c:1d:08:49:9f:54:82:96:1d:00:d8:b1:b2:ff:6f:46:56:
3f:87:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:09 2025 by rpki-client