Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: cBnc3VdU9NNcZxazJ2jOENIjekcAhYrBH4egXBrF3lY=
Subject key identifier: F4:F9:EF:41:AF:E9:FB:55:B9:CD:1F:DA:13:22:A6:51:B1:41:8C:A8
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 0194BCE0D610B316F0BCECB4ECEF7B50229A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: yXnHXGIB3NKi9cSWOXY1xC0AT1sS0Qm/naj1jPayHhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d6:10:b3:16:f0:bc:ec:b4:ec:ef:7b:50:22:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f4f9ef41afe9fb55b9cd1fda1322a651b1418ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:77:ee:30:8a:d6:82:74:36:70:f8:ca:b7:
d4:92:34:1f:c6:b4:a9:4c:08:cf:2a:3f:07:4a:41:
ac:5d:0a:fa:9e:96:e5:5e:b2:22:20:f2:5d:6b:01:
71:61:9a:1f:c5:76:c9:7e:04:2a:b9:6d:85:97:53:
12:f0:d1:aa:13:b0:e5:62:6d:44:20:55:02:07:88:
44:52:10:1f:91:2e:7f:63:1a:93:8a:7d:c7:31:30:
9b:13:a6:05:c3:f5:df:56:4e:00:3d:21:e4:74:7c:
fb:32:40:48:79:cd:64:c6:da:e6:0c:c7:31:77:34:
97:68:73:d4:4c:a8:1e:29:0e:fa:d3:b7:ae:b6:56:
c7:63:7a:01:32:fc:ff:02:3b:c1:9f:77:1c:2a:d9:
cd:13:70:ca:57:4e:74:91:19:ea:50:8d:f8:58:0f:
8f:41:19:95:86:06:4a:34:e5:88:33:1e:cb:96:94:
ee:c6:e6:0c:8c:8f:f8:9f:5d:f8:97:21:54:8c:8d:
b4:b5:e6:a6:ed:22:16:76:59:21:05:3e:b0:03:d7:
a9:fe:e3:bc:9b:dc:e4:c2:3d:5a:65:47:1e:d4:57:
a6:d5:d3:c0:44:f0:dd:fc:7f:62:2c:85:eb:1a:18:
ce:8b:c2:bb:94:c2:20:bd:ec:e9:95:c4:ef:4b:95:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:EF:41:AF:E9:FB:55:B9:CD:1F:DA:13:22:A6:51:B1:41:8C:A8
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:3c:4d:6f:4a:c5:af:ea:f8:7b:76:cc:6c:f1:0c:2e:4e:
4d:38:e2:88:24:d2:fc:de:0b:d1:19:5e:10:27:ec:6b:6c:84:
28:da:ea:38:82:fa:4d:c9:2b:dc:dc:46:71:28:aa:4b:0e:15:
03:7d:6e:0f:10:e2:f7:71:fe:23:2c:b7:d9:52:d2:b7:f8:c6:
9f:9a:68:14:cb:46:49:52:9a:81:bc:c7:4b:56:3e:d1:37:70:
4d:68:84:2f:1c:4c:ad:fb:22:60:d8:26:a4:c6:e4:a9:58:54:
54:83:39:73:f9:39:ab:fd:6c:f9:5c:0d:df:53:ca:b8:e3:3e:
71:e8:66:9d:de:13:dd:16:40:66:56:c3:7a:4c:4a:49:74:84:
eb:f3:cc:0f:67:d4:05:99:4b:86:ee:b0:e3:5a:76:dc:4a:92:
9d:3c:65:16:fa:09:b8:7e:f1:61:76:64:51:a4:9a:4a:8f:6e:
da:3a:bb:0d:70:5b:cd:c8:60:be:84:d6:13:bc:95:ce:4a:01:
f3:0d:d5:db:d3:5b:f9:1c:a2:e8:f0:bf:dd:76:e6:98:62:e3:
75:e3:ac:d5:1e:e9:0c:76:2a:1c:14:1d:a3:60:57:8e:12:b0:
09:3a:86:11:83:f9:0b:60:74:4e:c0:b4:35:1d:93:6e:10:8b:
10:22:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:09 2025 by rpki-client