Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
File: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft (raw, json)
Hash identifier: v4qY4MSAcHHE6A8D/XRRH5VKFrO6HGb79Xp+5cirAS4=
Subject key identifier: 21:DC:C0:EB:D6:1B:CD:6E:4B:38:59:A3:7F:7B:6C:9C:F7:6F:E5:AB
Authority key identifier: 01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
Certificate issuer: /CN=010d68a876cf5793fd00876254253d382779027b
Certificate serial: 0194BD18004574618E3159C116926E44A1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl (hash: uuJZIv9Xx+KikEhcnc2/aRLXTYljHEN4zQYSUoZSobM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:00:45:74:61:8e:31:59:c1:16:92:6e:44:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010d68a876cf5793fd00876254253d382779027b
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=21dcc0ebd61bcd6e4b3859a37f7b6c9cf76fe5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:d9:7d:71:bb:0d:d2:77:ae:4b:e3:a9:45:
d4:87:74:64:2b:80:4d:84:3a:d1:01:aa:b7:ab:da:
df:3e:e6:0f:b6:55:10:d4:5d:c8:35:fc:b3:cc:92:
75:03:94:ba:dc:b9:de:d1:94:4d:05:fe:41:28:21:
38:3c:34:04:76:75:44:75:60:b8:ef:07:73:d0:6f:
b3:bb:d4:57:60:c3:2f:5d:f8:18:97:14:b6:13:fb:
47:19:77:e3:1e:0f:bc:33:ae:a6:89:b3:82:56:7c:
a7:dd:9d:3f:b7:7e:83:50:ca:bc:a4:54:2f:ff:96:
1a:7b:da:43:21:96:f0:de:63:13:0e:34:88:5b:61:
4a:f1:95:6f:f1:40:80:14:4d:1a:5d:29:f5:40:f3:
99:45:98:58:96:ce:9a:88:a4:e7:be:cf:da:e6:b6:
21:e4:3a:04:a8:22:92:7b:df:cb:b6:fb:cb:09:69:
1e:62:33:88:42:bb:0c:dc:3a:2e:ff:db:87:ac:3a:
6c:48:e2:6b:78:97:9e:d2:18:2d:d3:f9:38:16:88:
51:0a:e9:0a:80:eb:19:99:65:3f:d4:6b:af:fc:46:
a0:e0:13:cb:58:c2:8d:bf:57:f7:aa:3c:f4:ee:3b:
8c:04:ff:0b:03:7d:4a:b4:05:72:f5:bd:13:5b:50:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:C0:EB:D6:1B:CD:6E:4B:38:59:A3:7F:7B:6C:9C:F7:6F:E5:AB
X509v3 Authority Key Identifier:
keyid:01:0D:68:A8:76:CF:57:93:FD:00:87:62:54:25:3D:38:27:79:02:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/c49d7d-1c5d-48fb-b070-d65729bb2dac/1/AQ1oqHbPV5P9AIdiVCU9OCd5Ans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d9:5a:28:22:c3:ee:f0:81:64:5b:d5:c7:ae:d6:e9:f3:de:
ff:35:a0:62:a8:c0:09:06:b5:7b:f5:e7:8b:c2:a9:a4:6e:2d:
1b:fc:82:15:57:d2:01:0b:88:ff:e3:a0:62:ae:a8:7d:8a:9f:
3f:53:33:06:a9:1b:9b:8b:f0:c1:da:8a:21:ea:ef:ec:18:2d:
39:10:21:df:9e:53:0b:67:c3:cb:45:cf:18:ff:6e:fa:03:b0:
39:6a:67:b0:e5:a2:c9:01:7b:16:d9:bb:77:0e:42:a5:95:2d:
31:3a:03:52:e2:21:33:03:a8:38:9e:4b:2c:dd:1c:8b:3b:7c:
8d:53:8b:fc:bb:93:b5:6f:50:fe:33:1a:07:b5:c8:2a:6c:d0:
d9:b0:a5:07:53:48:40:6b:2d:1d:07:23:51:e3:78:a8:41:b5:
89:10:f9:d1:33:24:05:06:3a:de:9d:10:bf:3a:83:94:33:fa:
7f:21:da:b4:d3:ed:f9:f3:e3:65:a0:84:1b:61:a3:16:03:65:
e0:b5:61:cd:bc:e3:95:6b:49:8a:35:ac:86:dd:41:ff:fa:39:
6e:36:2d:98:37:20:20:bd:fc:37:b1:47:e6:55:59:6c:59:ac:
99:ef:5c:19:49:a4:3d:50:c9:ae:98:6f:62:fb:be:02:ed:fd:
9f:e9:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:15 2025 by rpki-client