Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: Gv+/n4S17vXDo1B+aFvcWiDS8hDUHFIIScZKDxitjBo=
Subject key identifier: C5:5D:9E:18:6E:43:0E:3F:4B:65:61:7F:CA:D9:9E:63:3E:3B:4B:89
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0194BBCE0BAD1AB2B6E9D535079ED75364B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 06FE
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: q2Z/4vmtlsNGxBwHL1VUiRK/QJxRwVrG+5Pb/R6Ev/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:ad:1a:b2:b6:e9:d5:35:07:9e:d7:53:64:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=c55d9e186e430e3f4b65617fcad99e633e3b4b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:33:72:0f:dc:50:71:2f:f5:9e:c2:ca:8b:
60:ac:2d:50:2a:22:59:90:0c:a9:2d:32:8e:4a:6c:
c3:39:30:75:70:d1:17:60:4a:99:99:65:e1:e5:7e:
bd:9b:cf:09:0a:10:eb:2b:91:c3:f7:4f:18:3d:65:
2c:2a:16:27:bf:b7:39:02:dc:3d:cd:84:3c:40:b9:
bc:fe:27:fe:fc:0e:73:1c:4e:0d:fe:48:1a:62:29:
47:de:4b:f2:58:b6:73:14:93:ed:6a:f4:ee:b5:df:
0f:c0:d7:e9:3d:94:ee:e0:d2:a0:6e:29:98:7f:2e:
a3:c4:df:c5:98:aa:df:11:b4:25:7e:af:94:a8:ba:
ab:b2:c5:66:20:f6:65:0a:90:d8:f0:f7:04:71:5d:
54:d4:3c:a6:ad:43:5b:28:18:59:90:a9:76:8a:13:
3f:04:7a:c7:09:89:98:98:6c:eb:8a:a8:be:7b:6f:
51:e2:b0:b6:60:3f:4c:5a:4a:be:45:af:eb:a8:74:
72:26:fe:fa:e8:24:6b:9b:5a:41:cd:b4:56:46:56:
4b:30:d2:e5:31:1e:fc:85:c9:13:b1:48:24:b4:ff:
bf:29:0d:17:cd:4f:a9:0f:c2:1b:0a:be:12:36:dd:
f6:d9:3f:a1:d2:fb:c9:0d:e9:56:d5:d5:3c:90:63:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:9E:18:6E:43:0E:3F:4B:65:61:7F:CA:D9:9E:63:3E:3B:4B:89
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:96:ea:c2:87:7f:4e:c8:9d:ee:1b:69:d0:ea:89:b4:a1:
27:8d:1e:70:70:50:34:be:31:a4:5e:b6:63:ed:0f:09:03:50:
7d:90:4c:39:75:69:d5:e5:e7:80:cf:55:fa:a7:d5:48:e0:fa:
44:ed:73:86:d4:56:6b:28:73:4b:dc:6e:a4:2f:2a:21:fc:21:
fb:db:84:99:1c:fb:b0:57:eb:93:7f:b7:b5:b9:b8:65:42:2c:
e7:71:59:10:a3:1b:56:cc:4e:bb:9a:ae:38:d2:3f:50:9f:2a:
34:b0:df:a6:1a:c5:0f:d3:65:f3:c2:c4:58:c3:26:ce:e0:4c:
44:2b:4c:2d:a4:35:43:df:0a:bd:f6:6d:c8:1d:e5:61:0c:dd:
52:61:04:fd:aa:62:43:dd:50:a3:3b:26:3c:41:d9:dc:18:ca:
cf:1f:8e:8c:63:05:37:f0:ba:93:b1:b1:fe:8a:ac:e4:20:84:
63:40:2a:f1:cf:25:4b:51:b8:f9:d5:80:35:cc:99:bd:ba:1a:
46:f7:62:54:75:64:25:ce:8a:4d:48:34:56:98:11:a1:94:0e:
48:71:92:0f:71:04:f6:86:85:03:93:4f:88:3a:a7:ec:9a:af:
d9:c2:c8:9c:91:30:c3:ea:76:9c:9b:64:d8:cc:39:53:9e:ca:
d4:81:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client