Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: tUO/1+fOoZCFLCsgFmI8kmbtkVfmXNmkDXapFgtei4Y=
Subject key identifier: 3A:50:5B:64:DA:78:15:72:EE:28:92:27:6B:1D:E4:27:3F:C3:12:14
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 0194BC0524D1E4370EF4989ADD906D84955B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 0E9D
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: LYTkurcBvfsKySwAVOFOHj0ZbBd66mETum8iydDgk1M=)
2: r9ivPCH7B-EIjmvOeGIsU1bVmJw.roa (hash: ZoMymQkL6qzTxWYBfF5BxJb7oUgkp1cRchZsdJ96SAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:24:d1:e4:37:0e:f4:98:9a:dd:90:6d:84:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=3a505b64da781572ee2892276b1de4273fc31214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:99:f3:b6:8e:21:6c:bd:a5:66:45:c3:6d:
a2:7f:b9:b4:ee:7c:5c:40:86:15:dc:5c:e8:52:1d:
80:0e:48:4f:db:06:cd:57:8c:62:56:ed:8d:34:ba:
5f:46:57:7e:f3:07:c3:03:62:b3:e7:2b:1f:4c:90:
48:3d:92:3e:8a:76:dd:0e:d2:38:4e:ed:1b:7c:e1:
82:5f:91:cd:8e:b3:cb:35:30:ad:65:f3:4c:a6:53:
e9:7c:ee:6c:0f:92:45:b2:35:b6:93:0a:25:07:db:
30:fb:90:10:74:6c:71:87:bf:ab:a7:20:5e:1f:be:
99:bf:c8:07:62:a7:ac:82:a3:77:85:c1:ba:e5:a2:
26:70:f8:58:3c:db:6c:ea:3b:12:e3:72:1a:7a:09:
ea:57:a6:0e:74:17:32:c9:e2:1b:65:79:3a:19:23:
37:65:74:c3:f0:94:e7:18:36:b2:7d:50:39:c9:40:
66:ae:e7:79:f9:12:4e:86:46:4e:01:3c:d8:7b:a0:
3f:a6:df:58:d9:ec:db:95:c8:e6:07:23:e5:5f:e7:
c1:53:36:67:20:86:f3:9a:d4:be:f1:9a:31:2b:19:
1e:c4:4c:90:75:d9:c0:ee:7e:36:d1:25:62:78:f5:
70:07:f5:20:70:47:0c:c5:c8:74:ca:f3:28:27:31:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:5B:64:DA:78:15:72:EE:28:92:27:6B:1D:E4:27:3F:C3:12:14
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3d:a8:7a:aa:51:3f:b7:60:8c:ac:d3:26:c5:77:8d:78:c7:
35:32:ea:be:42:75:43:75:77:08:28:17:d6:b4:37:5d:d5:11:
0f:42:a1:17:02:65:bb:04:4b:ad:8b:d7:56:e3:d9:93:86:4c:
ef:2b:62:32:68:c7:bc:71:38:86:e9:2f:4e:ac:fc:49:12:67:
92:d3:2c:34:7e:00:da:55:d4:69:1e:74:e1:b0:e0:16:cf:fd:
32:35:26:20:1f:02:2b:02:c6:cf:57:31:d2:db:4c:10:a9:84:
f4:30:77:74:87:75:6b:e1:49:33:0e:5b:08:b5:70:f2:10:bc:
e8:76:3a:63:e3:22:e2:15:c9:97:7f:28:2d:f2:17:76:58:99:
65:13:4c:49:ca:50:6f:a2:3e:89:2c:d9:6e:b3:00:79:a4:d0:
39:0c:f2:b7:55:81:00:a4:e9:f4:f9:64:63:2f:62:67:be:f5:
c6:e7:44:0b:ed:c7:1f:59:45:4c:52:57:70:2f:30:98:9a:9d:
98:1d:d8:ea:d4:27:c4:fe:78:dc:a8:d3:a4:4b:3e:4b:69:a6:
6f:d6:2d:74:8c:73:6b:44:a1:bb:97:86:63:06:4d:2c:a4:80:
8f:24:97:69:07:c5:5d:3b:d3:c9:8a:d9:98:16:0a:b8:90:3b:
68:c0:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:55 2025 by rpki-client