Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: eBxY8xFW1+SfFd8zZb47JOjjCsnOlXFXg5cbxVAOlSM=
Subject key identifier: 57:7B:9B:67:4B:C0:37:6B:27:7E:C7:46:F5:7F:8A:15:0D:09:08:CF
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 0194BC72B26899515F485CC040C27E04940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: uytbwLK7XPm2X1qsQKmPoiVyCcGBjB5l3hMP7sojK48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b2:68:99:51:5f:48:5c:c0:40:c2:7e:04:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=577b9b674bc0376b277ec746f57f8a150d0908cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:8c:df:7a:e8:23:8c:a9:71:b2:c7:79:e1:
0a:e2:39:0f:0e:98:6a:02:b9:c4:8c:5d:c0:b3:4d:
b1:7d:86:e8:61:90:41:15:d5:5b:b3:31:8f:b2:70:
60:63:cf:2d:ac:c1:6b:6e:2c:f8:83:4e:b2:ad:f8:
00:ec:4e:4e:c1:5b:98:8d:42:5a:f8:57:fb:b6:34:
ac:e9:59:c0:0c:75:f4:82:4b:1d:99:8e:bd:e2:c4:
22:a8:83:73:6b:94:c7:ec:66:ff:70:a4:bb:2b:6d:
56:c3:d8:20:5b:da:af:36:5c:da:dd:cb:b3:43:bc:
35:3e:dd:b3:cc:41:61:75:02:33:e9:83:25:48:13:
33:87:cc:91:0f:cd:55:ec:77:ad:bd:14:d7:08:e3:
2d:d3:fd:46:be:e0:c3:e2:9d:4a:6b:e4:e1:70:be:
4d:ea:c8:1f:76:be:7c:96:ed:a4:1c:1f:6b:55:70:
08:4b:cf:43:fd:df:05:ad:e3:5c:a9:06:ce:7f:f0:
14:fe:2e:4d:30:03:2f:b9:e6:53:a5:ca:a3:4e:51:
3a:55:53:28:59:68:51:c2:25:04:ef:2d:c9:6c:75:
ec:34:12:64:0b:95:d7:27:bc:f7:2f:57:99:fa:1b:
36:5c:de:c9:09:b1:73:29:b7:d0:33:ea:84:50:70:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7B:9B:67:4B:C0:37:6B:27:7E:C7:46:F5:7F:8A:15:0D:09:08:CF
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:32:71:9b:01:fc:8d:93:45:a8:3a:14:ec:b4:3c:24:c6:ef:
30:7f:d7:3e:f5:98:55:00:1f:a7:6f:e6:59:b3:09:18:4e:2a:
65:fb:2d:c9:1b:3f:7b:80:3f:15:57:20:fc:16:17:14:23:d8:
95:83:bd:38:0f:35:a9:28:bd:f8:88:b8:5f:08:c4:d4:e4:6b:
06:62:61:13:8c:b4:82:d7:72:3e:45:3f:18:b0:da:f8:13:3f:
7d:d5:a5:bc:f0:7a:87:87:5b:f6:0c:90:83:e7:b8:c7:74:13:
6d:a2:1a:07:61:d1:bc:ac:09:4b:49:73:ef:58:12:1b:4a:47:
d0:53:5e:d1:8c:70:cb:b1:72:df:64:bd:48:0b:ad:73:73:54:
73:1c:b3:fd:a9:5c:a5:77:ff:09:db:a5:e6:af:5b:7f:73:23:
5b:fe:86:a9:3d:77:31:f8:88:01:96:85:88:d2:9f:69:20:10:
9b:ce:cf:46:47:d3:4d:7b:09:36:2f:bd:18:1c:92:11:e7:28:
e2:24:a8:82:5d:88:86:27:15:f0:1b:e1:7b:55:f7:94:cd:7f:
f3:01:6b:5e:61:16:39:0d:5a:97:1b:56:0f:38:1a:88:12:aa:
20:4d:dd:51:1d:8e:8e:56:46:4e:53:2e:74:1c:b9:86:e3:07:
30:bb:ec:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:45 2025 by rpki-client