Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
File: aQqw79d1diHIbXtpx29gssP6w1Y.mft (raw, json)
Hash identifier: IinQePFWCwIrpCAzrkKIWNTdZP+LLOmlllW9SrAuoCE=
Subject key identifier: B3:72:DB:8D:CE:0B:A9:C5:3B:D5:4B:63:A2:31:9B:6B:B6:51:78:E3
Authority key identifier: 69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
Certificate issuer: /CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Certificate serial: 0194BCAA1B37889B4B2EF633FD1F5E369208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
Manifest number: 0179
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: aQqw79d1diHIbXtpx29gssP6w1Y.crl (hash: a4SR8Qu3K1AmHSWWb8oWWfzeyk1x1aZ0tZiO5DejuAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1b:37:88:9b:4b:2e:f6:33:fd:1f:5e:36:92:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ab0efd7757621c86d7b69c76f60b2c3fac356
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=b372db8dce0ba9c53bd54b63a2319b6bb65178e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:8a:46:90:23:78:4b:16:f6:fa:81:dd:a1:
a3:25:ac:b4:e2:9c:fd:37:d9:09:29:fd:5c:97:0a:
38:1c:41:3d:e0:f8:cc:1d:70:08:36:67:52:74:c9:
d6:7f:d3:11:d7:c0:3b:0f:ab:f9:31:66:02:61:6c:
80:63:01:ad:bf:fb:53:d4:43:40:4b:51:d1:0c:8a:
65:b9:b5:c6:19:b0:26:f5:88:83:de:e2:ad:99:90:
c2:ad:b6:84:11:36:f2:a1:4a:2b:06:52:35:7f:75:
2d:5e:7e:d5:9a:74:f0:17:13:61:8b:50:2c:f5:d2:
06:58:21:a3:55:04:ae:e5:9b:dd:bf:df:b7:96:15:
a8:5d:9a:01:29:fd:6a:07:e7:db:8d:6f:b2:b6:21:
72:ac:df:84:5e:1a:3f:78:6d:be:f2:89:f4:33:56:
7c:0f:02:38:6a:f9:17:3c:63:c8:98:dc:ea:0f:aa:
64:dd:b8:07:4f:96:db:be:3a:17:8b:d7:b4:8d:f4:
b0:82:92:1f:64:e4:61:99:d7:b1:07:f7:6c:80:f6:
bc:9a:70:c9:89:29:51:6d:94:d7:13:c9:e4:f6:dc:
a0:a4:90:dd:7a:2c:e0:d1:e9:38:c1:ec:1a:6c:9a:
ed:25:bb:d5:28:75:a5:44:8f:b5:67:84:fa:89:4d:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:72:DB:8D:CE:0B:A9:C5:3B:D5:4B:63:A2:31:9B:6B:B6:51:78:E3
X509v3 Authority Key Identifier:
keyid:69:0A:B0:EF:D7:75:76:21:C8:6D:7B:69:C7:6F:60:B2:C3:FA:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQqw79d1diHIbXtpx29gssP6w1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/45b225-64e3-4d34-80d9-21c815a6eb9e/1/aQqw79d1diHIbXtpx29gssP6w1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ff:4a:78:d3:3f:0f:09:df:37:40:ed:5b:cd:f4:89:23:0c:
57:7e:a6:b8:24:69:8f:53:a9:c9:62:d2:a3:e3:2f:9d:1e:f1:
58:da:a1:99:22:aa:6b:d3:af:73:ea:05:57:b9:6a:d0:b4:88:
7f:e2:78:af:35:4d:83:fb:2d:fc:3b:f3:ef:5b:1d:0d:ae:b4:
48:0d:a4:bb:2f:79:74:f8:53:8f:9f:ef:43:eb:90:a2:74:43:
c9:44:30:ff:34:3e:5e:fb:78:20:f1:3d:1a:c5:62:3e:26:e3:
11:7e:51:82:39:f0:8a:a4:25:10:06:af:fe:9d:d0:b4:27:16:
bf:db:19:ef:58:8c:7c:c6:05:a9:67:38:3a:13:b2:35:90:87:
a5:01:03:8f:b3:9f:cf:d6:a7:80:70:41:b0:f7:6b:df:d1:db:
e6:e6:c1:b6:13:f8:9f:3a:cc:e1:51:7d:13:84:cb:07:12:e2:
3e:e5:66:7c:65:b3:f4:88:18:e4:06:ce:c1:76:16:c9:88:3e:
95:aa:f7:24:4f:97:c1:b8:5b:99:ed:4d:14:84:c7:1b:77:f5:
87:5e:5d:4f:54:43:5e:80:c6:f1:7c:d3:f5:ca:0b:9e:9c:e7:
77:82:ba:cd:29:a3:04:22:ee:e8:d3:9f:fb:47:db:8d:d4:e6:
66:a2:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:25 2025 by rpki-client