Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier: 9JOeUm8c7toSpjzMDbLIxFjaGckm+VEFIxjQjHZGwvw=
Subject key identifier: E2:CB:AF:93:79:BA:DE:82:07:68:7A:56:14:A6:E6:FA:80:3A:45:D0
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer: /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial: 0194BBCE28BB9B7695113371C0FC0AB35873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number: 0900
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: BhPniBIJqJLF9rWL8lgGSXfdKdj3cjTo3HPTb/7LPEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:28:bb:9b:76:95:11:33:71:c0:fc:0a:b3:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=e2cbaf9379bade8207687a5614a6e6fa803a45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:b1:1e:51:73:79:53:2f:ab:bc:cf:27:e8:
34:ff:e0:f8:07:3c:d0:f6:a7:87:43:87:6c:1a:04:
78:29:21:37:61:ed:d9:8c:6b:06:44:b6:99:2f:59:
e1:f4:41:d7:b4:55:c5:d2:95:20:15:6c:3c:e4:9b:
04:7d:7b:53:d8:68:c6:b3:69:45:63:89:e1:ec:e4:
99:13:21:c9:f5:2d:fa:a8:47:19:e4:e9:a4:57:75:
41:4d:d7:19:ee:4b:4f:0c:b2:75:a5:10:a6:fc:be:
ef:df:4c:76:41:27:da:02:30:62:f5:9b:eb:b2:7d:
78:74:da:6b:f4:45:56:ad:15:4a:77:b9:54:db:5f:
c4:c9:09:d1:ab:24:a9:a4:52:a5:79:7e:55:7a:6f:
ec:d4:a7:9b:a6:b6:31:c4:5b:36:dc:d1:e2:77:df:
23:d5:e8:78:5e:b1:41:61:d4:3c:0b:46:d2:6a:b1:
37:9e:88:b6:1f:c1:cf:23:c8:9a:de:ec:e0:47:87:
a6:86:1d:5c:a8:e1:49:b5:62:e0:ff:17:14:6d:bc:
42:1a:81:b4:2f:62:6a:a2:23:32:ff:f2:26:d2:a7:
21:ff:3c:5a:8c:62:c8:d0:11:38:ad:eb:db:aa:23:
38:2e:c1:25:54:34:7e:28:36:17:2e:c6:73:11:c9:
37:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:AF:93:79:BA:DE:82:07:68:7A:56:14:A6:E6:FA:80:3A:45:D0
X509v3 Authority Key Identifier:
keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ae:07:98:c2:82:96:f1:71:da:bc:a3:78:78:66:45:76:4f:
a5:69:e3:1e:2f:3f:f3:02:1b:fb:14:18:be:a8:11:be:8e:52:
0e:5c:33:10:f8:e5:65:0e:2f:17:56:84:94:60:af:59:9a:7c:
4e:a9:ab:39:12:4e:e1:c2:95:7a:88:70:e7:83:2b:4a:98:91:
28:0e:22:b6:e1:dd:a7:e2:b5:c0:e9:36:c4:96:96:59:e9:b0:
db:6b:80:91:d7:68:37:fd:5e:ae:b5:dd:52:3f:be:fc:fc:7f:
a2:6f:49:12:10:8d:cd:52:f0:bb:16:ad:98:27:e4:42:10:24:
a3:70:b6:6c:22:55:d2:0a:41:21:3c:4a:5f:11:9e:25:de:56:
8a:f7:89:84:fe:19:b2:f5:21:f9:6b:27:39:1c:d4:47:4e:91:
e9:7e:b0:8d:05:05:15:79:fb:bb:a4:dc:84:12:25:67:28:c1:
46:16:a4:d9:dc:64:92:7a:34:de:48:e4:3d:14:b5:56:6c:4f:
e6:4f:df:d8:4b:44:04:a6:82:51:b5:5a:35:14:20:0a:75:c5:
09:84:a3:bf:0e:34:85:c6:a9:f6:ef:21:6d:bd:08:15:64:2d:
bf:2d:27:4f:27:1a:47:a3:2d:42:9a:0e:b6:67:16:91:67:6f:
14:c5:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:02:54 2025 by rpki-client