Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier: KmpH8wrRgPnWHcf53fZ542hM+1RQflB1Fi/3GDsE7PA=
Subject key identifier: 49:E3:F7:CA:12:65:64:58:BC:64:BD:BC:ED:7A:96:1F:69:EC:1D:B5
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial: 0194BC3BF76DCB08FB718ED7228BB7A07B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number: 0594
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: 86fwlV4GrAXMPLFLQ39xdrwF/lWsO1fGSlPaiF4Y5xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:6d:cb:08:fb:71:8e:d7:22:8b:b7:a0:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=49e3f7ca12656458bc64bdbced7a961f69ec1db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:04:22:d0:8d:62:c4:90:e1:f6:42:29:1c:
a5:f5:00:4b:26:65:fb:08:2a:42:60:f3:db:be:88:
9f:25:94:9b:95:12:dc:25:bb:b8:28:d9:a3:70:91:
5e:4e:29:2a:e6:3e:dc:df:27:31:62:ad:ba:b0:47:
69:4a:c2:ac:69:dd:3a:16:7d:45:6c:b8:f2:f3:66:
2e:b5:5f:e0:bb:bf:d2:2b:d5:d4:d6:11:ad:cf:05:
9d:5e:8d:32:67:bd:54:50:22:a3:3e:f6:96:12:ab:
b4:3b:a4:eb:d6:b4:d8:6a:a5:5d:0b:b9:7e:ae:90:
2a:d1:66:b8:f1:de:c8:bc:5a:05:d8:1f:a4:9e:68:
dc:9b:a6:ba:5b:35:12:d6:5c:f2:61:cf:08:90:6b:
4f:b4:77:63:67:2a:c9:78:3b:13:4d:fe:09:d0:70:
c3:ef:49:42:c5:d1:a2:48:d5:01:8f:27:5d:aa:f2:
be:2c:90:e0:84:5d:27:cb:bd:27:71:8f:b3:b7:38:
aa:01:7b:6b:05:b7:32:0b:5d:17:dc:12:4e:1c:74:
cd:4d:7c:35:9b:6a:dd:8f:88:00:b4:bd:9d:c9:8f:
1f:9a:59:31:55:84:26:f2:5d:e6:7e:5e:6d:e6:e3:
b5:8f:5a:c7:bc:8e:10:9d:d4:97:0e:a4:16:06:99:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:F7:CA:12:65:64:58:BC:64:BD:BC:ED:7A:96:1F:69:EC:1D:B5
X509v3 Authority Key Identifier:
keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:5b:8e:80:4f:6a:f7:4d:97:7a:9e:bb:0d:1f:45:14:0c:
fe:7d:a5:fa:9f:08:c6:4c:45:ee:9b:a0:64:4b:c7:1f:d1:c0:
22:60:0e:d8:92:d5:d1:39:e2:c7:2b:5a:dc:6e:0e:8e:59:0d:
9b:76:c6:ec:f9:fa:45:4d:74:62:ae:9d:a7:67:ac:7f:4f:a8:
57:e2:6f:85:9d:aa:1c:81:33:9f:c9:32:0a:67:0b:b7:2d:43:
8f:dd:6e:fa:f7:83:fe:77:34:4b:9d:ff:69:3b:b1:d1:66:88:
03:a8:2c:a1:ed:a0:52:4d:92:e7:00:32:ad:3c:23:60:3b:e3:
62:e2:49:a7:cc:fd:c9:7a:fc:49:4f:f0:34:7f:45:e3:74:62:
47:8b:c6:ff:61:0d:cd:dd:14:3e:ac:e6:52:23:7a:ae:f3:1c:
8a:94:de:4b:f6:eb:c5:42:24:f1:1a:c4:ad:1f:58:03:bb:25:
3d:79:85:e0:2e:b6:9e:ff:13:7f:df:86:3f:f4:d3:08:53:3d:
ec:25:91:fd:26:a8:12:21:8e:e9:94:21:db:9f:49:7a:1a:f9:
e8:5d:0e:bc:4c:19:04:62:af:c9:da:1b:51:8c:7c:b2:fc:c1:
1e:7e:57:96:27:2b:aa:f3:70:98:7c:c8:1f:50:18:0d:4c:64:
4f:53:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client