Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File: aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier: QXr1nJlPtRN9FbjNN+7rJLRJ3Ukd6TNe+5yUDleybrM=
Subject key identifier: 6C:AA:44:2F:04:22:10:6D:D1:C8:68:F2:0C:5B:B7:A7:C0:85:12:65
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer: /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial: 0194BD178AECA28BC260415A5287743EB23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number: 0FEE
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: YlNG9g6bcez/x3KAVnqF97bVb9bCA7XchwqxSukPd74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:ec:a2:8b:c2:60:41:5a:52:87:74:3e:b2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=6caa442f0422106dd1c868f20c5bb7a7c0851265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:16:ca:a0:76:4e:19:39:34:b4:24:26:1d:
3f:fc:47:13:46:90:ab:3d:5f:25:67:92:27:33:e4:
24:df:a1:eb:54:b7:ca:3a:4a:9a:ba:8f:ab:94:6c:
02:a1:81:67:fb:3b:78:00:b9:60:9f:88:f7:c5:f9:
f2:0d:99:17:47:ea:50:12:21:08:53:d3:12:c2:ff:
d7:f5:1e:66:20:b7:0d:9c:2a:2a:db:fd:e7:a8:1b:
f4:b2:16:ef:88:a5:59:71:11:71:4a:98:b6:dd:1b:
90:1a:87:41:09:e7:59:2a:76:19:f4:77:bb:22:83:
cb:49:59:8a:e7:14:14:f5:ef:23:75:5f:df:02:ad:
e1:5b:8a:28:54:64:0e:fc:92:46:fa:b5:d4:96:6f:
91:db:92:a5:0f:bb:ae:45:ed:8c:89:05:8a:a2:7c:
33:62:be:86:81:f2:30:4f:a4:71:a4:c2:d5:1b:82:
18:43:3e:1a:02:8e:66:b5:f5:9b:27:55:50:dc:22:
0b:5d:90:ea:7c:c7:3e:e4:43:33:ce:1d:8e:9e:04:
2c:a7:25:62:75:4b:c7:f4:18:1c:53:66:7a:bf:23:
2a:01:29:e2:e0:c6:04:13:ac:7d:19:c7:44:5d:ff:
90:c2:7a:d8:bf:eb:81:fc:a3:1b:21:dc:8c:9b:d0:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AA:44:2F:04:22:10:6D:D1:C8:68:F2:0C:5B:B7:A7:C0:85:12:65
X509v3 Authority Key Identifier:
keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:49:d1:51:6c:79:24:fa:76:e3:d2:bf:5d:04:3e:29:f4:ca:
8a:84:aa:ef:6b:e2:47:c0:bd:e8:b5:3b:61:d4:52:2c:f1:72:
9f:db:0e:dc:17:50:68:a7:d8:ce:36:94:b1:fa:ca:f7:17:cc:
cc:3e:f0:96:b9:d0:ff:80:dd:e9:30:e9:ff:5c:b0:a9:3d:42:
3e:dd:f2:30:fe:25:e4:81:99:fe:09:b9:a9:eb:68:a1:56:7f:
12:39:51:6e:67:15:f3:c5:8a:91:71:f1:dd:b9:d9:02:f2:7c:
74:08:aa:40:91:82:df:00:5a:ef:80:88:00:23:f7:5f:31:5c:
b2:1f:fe:58:64:77:73:e4:a9:b7:fb:4b:be:18:95:0f:7e:07:
87:30:38:50:ff:76:7f:d3:f7:29:28:33:51:42:37:9c:1f:78:
92:6c:e5:9a:c3:39:e6:a0:45:54:20:40:d6:d2:b5:71:97:0c:
73:2c:1e:65:a4:c6:95:11:1c:a5:51:ad:67:82:95:ea:16:1f:
69:62:b1:8d:d6:70:41:0a:4a:5f:79:65:96:a1:94:39:65:10:
aa:52:4a:06:62:97:a4:55:c1:e1:79:44:8d:44:db:c2:83:d1:
4b:99:5b:f7:dc:55:fe:a2:4a:c5:4d:35:b0:ed:aa:09:5f:e2:
df:f0:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:09 2025 by rpki-client