Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: 7kGLMXizhbXesGs6wPeBOY2qm0FrRUuu/oB8FEAFoPU=
Subject key identifier: 31:A2:6C:37:9B:83:63:51:7B:06:A7:B9:BB:F3:62:33:00:58:E0:33
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 0194BBCECA532ADEB8C849139A289E91A72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: jO2l07bgzYej4H8gEoFWgcPy0GYDvgH9nAcNBw4v2H8=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:53:2a:de:b8:c8:49:13:9a:28:9e:91:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=31a26c379b8363517b06a7b9bbf362330058e033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f8:ba:02:18:68:35:60:68:4d:5d:ff:32:17:
b4:04:6a:e1:17:22:bb:19:cf:74:95:82:1d:91:fb:
65:6b:f9:4d:b4:f0:a0:80:0c:fc:eb:c2:98:70:53:
d3:2d:9c:8c:6c:d2:5b:2c:d8:5d:a9:08:4c:57:98:
69:0c:ca:4b:fe:f1:63:d6:3d:66:ef:9a:24:6d:76:
5b:ab:17:c3:45:60:a7:6c:46:c6:31:72:d9:ce:df:
24:e4:1d:32:f9:52:b6:8f:d5:b6:f9:c4:bf:07:62:
13:e0:89:07:2a:5c:d0:c2:fe:2f:6d:60:ef:19:a4:
a7:e1:37:17:bf:6c:3e:ba:93:65:e7:24:92:9d:a7:
95:f4:23:2e:0e:5a:2e:4d:bc:c3:70:9d:56:79:a0:
51:7f:31:10:47:e5:44:bc:3e:48:55:f1:f9:1f:83:
78:4d:b8:f3:62:bc:58:4d:fa:8a:b6:21:7a:b7:82:
b0:1d:9d:1f:09:21:4a:ad:85:90:9f:70:3c:e7:36:
65:be:f8:fd:a6:f2:a2:ca:c6:46:d3:a7:ac:79:61:
35:14:6c:f2:86:89:34:c3:2e:02:c2:06:e5:61:73:
6d:c2:8d:24:42:18:b8:46:ef:78:74:9d:ac:05:6b:
73:d4:ea:b5:47:93:49:9c:4a:4e:f5:30:d7:2e:87:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:6C:37:9B:83:63:51:7B:06:A7:B9:BB:F3:62:33:00:58:E0:33
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4d:46:8f:94:03:99:2e:ef:c1:2f:b5:4d:9f:f8:2f:db:d3:
c4:36:76:10:42:56:30:88:36:8f:6c:84:8e:bb:dc:ab:d7:f7:
3a:ad:54:92:3f:b9:c2:83:09:55:b4:63:27:18:8e:50:41:71:
2d:92:46:2e:6f:2a:2b:ba:3d:06:0f:4c:c5:8a:07:c7:32:d8:
3e:88:36:f8:bc:18:56:06:9c:0c:ed:8f:d6:01:91:34:f4:ab:
b6:73:32:71:6b:c6:b8:3e:98:dd:16:e7:4f:bc:ec:a6:72:58:
ec:56:48:cd:af:d7:ac:ae:25:e0:8d:1b:8e:09:f2:3e:79:ff:
43:a5:24:f4:9a:55:3b:30:ef:8f:06:90:4f:79:f9:96:cf:c0:
7e:d9:92:11:3b:e8:d4:8b:5f:11:2a:69:ec:5d:e0:58:4f:9c:
4b:76:24:c4:19:5a:3e:e7:ad:9a:5a:82:91:60:dd:13:8b:97:
6e:99:4c:0b:3f:ea:b2:15:24:03:c1:6e:2e:92:38:5e:2c:8f:
03:8f:3a:74:05:2f:05:18:0d:3e:c9:03:bb:99:9b:ff:25:9c:
ac:b7:32:e4:19:37:18:aa:c5:d5:b6:3a:59:f1:a5:81:43:37:
a6:8b:2c:6b:30:97:5b:d1:ed:4c:61:9d:17:cb:fe:0a:16:5e:
fb:d9:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client