Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
File: aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json)
Hash identifier: XMafv1w5FprIFYanae4dabaTt/mldsrPx46iSDX5u8Q=
Subject key identifier: 42:AB:C4:6C:62:E0:19:B1:D4:8B:D6:FB:40:A5:1C:77:4F:4F:20:43
Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
Certificate issuer: /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Certificate serial: 0194BCA9C48403798BEC6341C573410C76B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
Manifest number: 0E66
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: cBFCGxG3B5kmoTHtvmVs0CnV3SwgA5cJjB394IgVjVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c4:84:03:79:8b:ec:63:41:c5:73:41:0c:76:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=42abc46c62e019b1d48bd6fb40a51c774f4f2043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:1b:46:3f:5a:24:14:f2:a9:37:46:bb:1e:
d0:e2:f5:3e:eb:44:22:bd:36:70:4c:37:3f:8e:ed:
3b:66:85:25:03:ab:e6:39:c9:b6:1e:0c:1f:8e:d7:
e5:a7:55:e9:ee:f4:74:3b:e6:d2:6c:81:22:ed:ce:
81:a4:78:bf:d1:c7:16:3d:c9:94:65:b9:ac:a3:a6:
05:ef:4e:e9:8c:3e:02:54:ca:50:d0:3a:4e:a5:5f:
15:cb:49:bb:09:a0:7c:3e:00:9b:84:d5:df:d9:8f:
49:1b:3f:42:f3:c6:6d:c3:2a:66:d4:28:90:c2:d9:
19:44:64:2b:7c:f1:bd:4c:46:54:42:96:d7:c4:55:
45:0e:93:ee:e3:72:af:25:02:c8:7b:c3:3a:ec:ca:
18:71:10:2c:3f:8c:2a:37:30:23:05:0b:06:eb:2d:
8d:e4:a5:6f:93:61:d8:c4:91:5e:fc:99:a0:2e:9a:
3e:89:e0:50:81:e6:f8:01:bc:08:15:61:9a:4f:96:
44:8e:60:b1:9a:6e:e5:2f:a0:ea:d7:91:11:0e:6e:
0a:11:6d:e9:aa:af:d5:24:0f:3a:a8:c0:4d:b5:e8:
03:fe:d4:4a:3a:bc:78:14:0e:2d:17:29:57:71:dd:
1f:be:50:a3:30:c3:90:ce:2d:02:9f:03:de:a0:f5:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:C4:6C:62:E0:19:B1:D4:8B:D6:FB:40:A5:1C:77:4F:4F:20:43
X509v3 Authority Key Identifier:
keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:68:5b:1a:c6:68:9d:54:6b:c8:38:9d:09:e4:4c:ea:3b:82:
4c:10:1e:85:a0:87:e3:b0:31:ea:05:36:6c:23:05:60:d3:b3:
f7:19:65:a2:fa:4c:57:45:09:a5:fe:81:7e:1d:b8:a0:74:08:
79:d6:ca:23:52:1b:24:de:41:8f:ec:74:eb:8f:8a:cc:83:56:
4a:19:68:27:ce:9c:06:21:f5:aa:54:93:71:7c:43:3d:6e:c7:
b1:4b:e7:b3:ae:09:1e:19:9a:23:b6:86:3e:7a:18:59:88:42:
f5:68:fa:74:6d:59:78:26:49:cd:5c:28:ef:7c:8f:e5:78:a0:
71:10:df:62:e2:b3:03:ed:39:7c:ae:40:0e:6e:93:85:97:11:
66:69:40:1e:ea:1f:42:6e:c2:37:40:a2:9f:56:9c:49:bd:e9:
12:e2:ae:c3:f5:0c:0f:05:dd:96:fe:34:bd:5f:08:df:63:be:
87:fc:40:cd:3a:2a:3a:40:30:0e:54:b3:7a:a6:65:42:02:ba:
77:8c:47:b5:83:25:1c:85:bf:4c:f0:30:cb:ae:dc:5e:68:cb:
1c:69:40:9e:26:65:7e:fd:9b:f1:92:70:d5:9c:8f:07:a7:75:
13:3c:36:c3:ef:4f:69:37:67:bd:59:da:2c:67:17:b6:cc:84:
84:83:9d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:28 2025 by rpki-client