Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: +yDEI7UFiG+1VUXCNyWwFBggFteslxIDtIE7kopOO2Q=
Subject key identifier: 2B:DB:48:23:C4:11:AE:44:35:D7:35:D2:37:C5:F9:17:BD:65:B9:B1
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 0194BC049DAD2D821672F58DB73AF0DD7430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1113
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 5Q+gLsdr/vI3sx6YRRlAdXawygzMYTNVQd6uIGIuOmk=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9d:ad:2d:82:16:72:f5:8d:b7:3a:f0:dd:74:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=2bdb4823c411ae4435d735d237c5f917bd65b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:a9:9e:95:3c:86:a5:70:56:db:24:c7:6b:
a4:36:e4:23:bc:2c:19:16:15:08:09:41:66:35:90:
2b:67:91:f8:9b:70:63:41:c1:0d:5f:06:ef:d6:8b:
d9:ca:6e:4e:95:1c:59:bd:af:2d:0f:86:76:d5:5b:
10:31:59:f4:00:e4:07:28:29:4a:a8:dd:7d:2b:05:
06:cf:25:e5:c7:4f:e2:0b:68:86:d8:93:90:16:11:
9b:f1:41:69:64:33:ce:85:f2:b2:64:83:b3:21:09:
b2:2d:3e:eb:16:ab:63:00:78:bc:dd:a2:63:0c:95:
12:64:e7:93:71:d0:71:17:ac:f0:94:df:cf:b0:ab:
aa:c1:e2:1b:91:ab:1d:21:75:ce:f3:03:d1:5c:ba:
5e:8f:a0:c6:2f:9d:a5:90:5a:84:68:05:97:9a:5a:
a4:4a:e5:0e:d6:db:35:28:a3:b6:0c:90:2f:cb:bd:
f2:38:42:2b:e2:8e:f5:8e:4a:bd:5f:5c:7e:e3:da:
f7:2c:52:d7:9e:d1:95:a6:67:e2:2f:49:76:ea:03:
91:cd:90:a9:a1:38:7b:3e:2a:6e:81:bd:67:58:f3:
8a:c7:b5:8f:50:86:35:7c:bb:a4:ae:51:4e:74:27:
7c:cb:47:30:4e:5f:89:03:d1:07:f3:b2:66:b4:f5:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DB:48:23:C4:11:AE:44:35:D7:35:D2:37:C5:F9:17:BD:65:B9:B1
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f8:98:3a:32:0e:2a:50:51:35:11:02:78:78:cf:b5:36:cc:
73:80:54:45:f0:1c:bb:84:55:1f:62:22:01:bb:62:ac:67:15:
4e:26:73:43:7d:bc:62:de:c2:59:b4:6a:73:7b:4e:de:1c:f4:
27:66:dd:73:3f:d1:e3:66:f7:36:ea:bd:3b:52:8f:a4:8b:58:
ea:43:1a:37:ec:ca:aa:b8:fc:2c:3e:2e:9e:28:34:b9:d6:95:
04:14:d7:6b:c8:d0:09:25:c3:ed:4d:3a:2d:33:c9:f0:77:d5:
99:eb:ed:b6:5d:ee:b1:bc:49:75:0f:11:83:95:22:2f:ab:ef:
5b:b6:bb:d3:f0:c0:31:66:49:0b:63:72:b4:e2:87:1a:41:fb:
87:30:f9:40:f6:0f:f2:37:7f:00:fb:79:3f:3b:47:af:56:89:
ba:e4:e5:24:50:2e:98:8b:21:3a:d9:e3:67:8b:4e:84:f5:f6:
48:3c:d9:e3:83:b3:b6:d4:f9:45:e5:35:db:f9:c8:2c:fe:6c:
8f:7b:d4:00:90:5d:2e:37:e5:94:15:d9:8c:2f:ee:fb:86:76:
56:aa:27:19:fc:98:15:1f:25:cd:aa:53:f5:89:7b:85:27:ea:
68:36:de:70:c1:56:91:05:dd:02:79:0b:87:7f:7c:86:62:17:
09:48:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:15 2025 by rpki-client