Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: DfpBCBIcHUz7GsrtlnQj/SDG5p6DWCd6pW1XfE7h328=
Subject key identifier: B6:2A:08:7B:48:0E:54:85:06:B7:B9:9A:CC:C1:AD:27:FA:11:25:C5
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 0194BD8594A29EE99AD773A6A5B379BE817F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: AC
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: ZYZiei5oP/AABg3g57aGfx1N8Py8AjL2YeeroVydVOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:a2:9e:e9:9a:d7:73:a6:a5:b3:79:be:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=b62a087b480e548506b7b99accc1ad27fa1125c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:7e:54:18:1c:37:10:02:1b:2b:61:c5:2e:
0a:14:64:6d:b9:e3:6f:73:2a:a6:15:6e:aa:77:1a:
1e:3f:20:06:af:fa:da:b4:86:eb:33:2b:aa:de:19:
34:69:e1:24:8b:81:df:fe:b6:09:d4:e9:86:f6:06:
08:cb:4c:f5:d3:a1:05:c1:e3:57:fe:6c:f3:e5:83:
d7:62:8b:c4:68:8c:6a:6a:35:ed:98:92:4c:b1:49:
12:f6:12:ff:c9:3f:aa:b5:f5:6b:fa:1d:8a:da:5d:
40:2c:ba:7d:91:19:ef:2f:f0:79:27:a7:34:9d:50:
8a:8d:07:24:bc:4e:83:8e:de:62:7e:df:4d:12:80:
3e:c8:d0:87:88:19:07:98:ed:2b:b1:d7:dd:83:5f:
18:66:a5:b4:a7:a7:80:06:ff:28:aa:31:7e:d6:c0:
2e:ad:e8:d1:88:8a:6c:3d:5e:39:48:85:80:21:8e:
e0:2d:b1:c7:74:5c:dc:3c:fc:9f:32:38:91:2b:39:
48:cf:05:d9:cb:5b:0c:2a:af:58:f2:13:09:77:92:
da:13:9c:b2:23:14:22:e8:ca:c3:d3:d5:88:e0:f2:
e8:d3:c0:93:f7:10:a3:fd:33:63:8b:76:4d:74:2e:
7a:c2:05:48:90:e3:4e:4d:de:00:94:8b:70:ca:77:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2A:08:7B:48:0E:54:85:06:B7:B9:9A:CC:C1:AD:27:FA:11:25:C5
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:49:1b:e6:68:c6:3b:dc:83:65:0d:db:5f:d8:4d:35:83:15:
6e:ab:88:65:b7:93:45:73:42:cb:27:af:c1:68:53:8f:7a:3f:
b2:98:16:7b:1c:47:a0:f2:fb:58:48:0e:06:83:03:a1:e9:f4:
09:4f:33:ce:78:b5:37:8c:d0:bd:90:47:f5:ca:30:49:99:32:
1b:c0:e1:4a:bf:20:6b:70:90:c9:6a:8a:15:48:19:6f:37:1a:
75:ae:12:dc:b1:9b:3a:f0:9e:9a:0e:08:24:e3:41:16:3a:fe:
ea:32:3e:42:72:c9:42:13:c8:ed:8f:d9:40:21:52:26:40:9b:
dd:b0:ff:ce:9d:b6:5e:67:71:f8:6a:5c:08:97:ee:1b:e4:a4:
da:bc:af:93:cc:9e:ec:a4:a1:61:90:99:67:e5:68:f7:c7:08:
d9:45:70:49:9c:2e:e2:c7:b5:e6:e8:cd:fb:f2:76:0a:f7:2f:
d0:be:20:cc:05:08:91:6a:1f:bf:4f:1c:fa:1b:ca:d9:fa:7f:
02:d0:2f:10:8d:66:60:df:52:6f:d6:a8:e7:97:86:e3:41:7f:
c7:3d:e6:c4:21:b8:ba:11:d3:03:3c:49:cb:92:1d:56:5b:bf:
7f:de:a1:5e:f4:13:33:90:7a:69:d8:09:45:56:14:3c:03:46:
4a:05:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client