Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
File: aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft (raw, json)
Hash identifier: /xbLw2nGzNF5HAFD9AAcKwRclulN0njj6TCHUmNzO/Y=
Subject key identifier: F7:78:73:FB:BB:C9:20:4B:27:B2:A6:E1:B2:8A:A9:AB:69:CA:81:2B
Authority key identifier: 69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
Certificate issuer: /CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Certificate serial: 0194BCA9DCBE1719F005E9DF19031A5D6B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl (hash: PLkZF7XuxFw28zGrqeiHzlsfAqAy5L/NNebA/MnEoVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:be:17:19:f0:05:e9:df:19:03:1a:5d:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=698d47bedf8489aa02d3db46f98b4f7a264b480a
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=f77873fbbbc9204b27b2a6e1b28aa9ab69ca812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:d6:93:59:8e:53:65:0c:b3:6c:b1:00:38:
69:91:22:06:f9:55:df:f6:16:81:e9:9d:0a:9a:5c:
39:8e:d5:5a:d2:1d:f1:9e:28:38:f0:90:75:e1:59:
ec:30:79:c6:10:80:18:a6:f1:68:11:6a:b5:76:9e:
94:59:e6:f4:19:81:03:c7:79:7a:57:6e:e5:08:88:
d5:0b:da:93:f7:0f:c2:13:b5:9f:b5:80:2b:09:eb:
90:a7:3f:55:30:11:b7:4a:65:d0:4d:32:29:1c:d7:
0f:66:f1:0c:ea:fb:9b:44:63:45:df:d5:f1:55:8a:
de:7a:b0:31:02:58:fb:20:9e:e6:95:de:e5:b3:fb:
c2:af:c8:d1:82:f5:75:0a:a9:d5:35:87:71:be:64:
8b:2d:81:8d:8f:95:b6:50:88:b1:98:7e:2b:b6:31:
98:95:77:cc:6d:b6:21:57:a4:a2:63:bb:94:54:bf:
95:e8:8c:cd:7d:64:b6:43:bd:37:80:35:b9:0b:ac:
fd:40:d1:73:0a:8e:35:88:9b:28:18:ea:16:71:83:
70:ab:56:12:75:fb:bc:49:04:b3:9e:b1:b9:51:85:
73:20:dc:12:98:e8:74:c1:b2:64:1d:70:bd:3d:ea:
3d:48:c4:f9:f2:f6:13:01:3c:9e:d9:0f:28:9d:ad:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:73:FB:BB:C9:20:4B:27:B2:A6:E1:B2:8A:A9:AB:69:CA:81:2B
X509v3 Authority Key Identifier:
keyid:69:8D:47:BE:DF:84:89:AA:02:D3:DB:46:F9:8B:4F:7A:26:4B:48:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aY1Hvt-EiaoC09tG-YtPeiZLSAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/59c063-27dc-44ce-a60f-b149eb705dcc/1/aY1Hvt-EiaoC09tG-YtPeiZLSAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:52:3a:3d:9d:a3:c2:32:d0:06:c3:7d:a8:94:b3:45:34:d3:
ca:1c:cf:60:61:91:ee:dc:f8:2e:d7:d8:cf:51:66:6b:82:50:
21:2e:99:7e:06:3d:b2:95:d6:24:d7:2a:de:0b:6a:dc:9f:c6:
6d:cc:3b:a3:dd:4d:25:2f:c1:30:25:bc:36:ac:52:89:e7:01:
82:e2:95:e9:22:ab:d2:b3:13:eb:80:39:c5:92:2e:93:00:0a:
5a:97:a6:1a:7c:af:24:1c:86:a9:c2:ab:6b:6c:d9:be:54:62:
f4:50:fc:4f:f6:7b:f2:3b:39:ef:4c:0e:22:fe:3d:68:aa:c1:
e8:9b:ad:f2:1f:5e:cd:58:65:ca:99:18:77:94:8b:b4:5e:26:
bc:ba:3c:49:94:c3:18:c6:a2:c1:9f:97:6f:19:e3:a4:c2:4d:
0b:07:9a:c0:58:2f:20:93:18:2a:01:b3:a3:71:5c:33:85:12:
e3:fe:05:12:ad:76:2e:d7:bd:f6:e9:67:8b:7f:be:af:d0:83:
52:b1:a7:26:61:a6:54:28:db:04:03:3b:69:94:51:d2:5b:8a:
c4:38:82:f1:ca:40:e4:cb:ca:74:f8:1a:2e:45:69:7f:01:05:
6c:c7:a2:ba:2a:67:41:04:20:12:7a:93:d1:30:40:9b:4d:db:
6a:48:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:10 2025 by rpki-client