Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
File: AyZBcSxiGTI3x0InUVMrg5tA4H0.mft (raw, json)
Hash identifier: C/VicF4SWoqnktUnNnNfSlkfXjRJL5o2yjWyB5hg4b8=
Subject key identifier: 60:7C:CA:E2:06:7C:AB:95:80:58:74:8D:51:72:5E:E8:88:9D:E1:7D
Authority key identifier: 03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
Certificate issuer: /CN=032641712c62193237c7422751532b839b40e07d
Certificate serial: 0194BC3BC8A576D4F60317AF4E22D8F350DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
Manifest number: 0B62
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: AyZBcSxiGTI3x0InUVMrg5tA4H0.crl (hash: peUw+6ahRjNdeKqvP+JyhmkI339Lv9EOrSv+Ixb0su4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:a5:76:d4:f6:03:17:af:4e:22:d8:f3:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032641712c62193237c7422751532b839b40e07d
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=607ccae2067cab958058748d51725ee8889de17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:8c:be:31:49:80:45:be:7b:88:14:04:a1:
54:df:60:36:28:e1:f8:7d:ec:c8:d8:50:ef:6e:76:
3e:d2:b3:51:21:a5:c4:e0:c6:b7:c5:0c:5e:ea:9e:
69:a6:54:e0:e8:49:54:4c:f2:ac:af:01:d2:c5:68:
37:81:44:37:c1:8f:d6:ce:ff:4c:51:46:31:61:24:
35:cb:26:3d:9a:11:38:46:3b:bc:29:b1:23:e0:27:
35:61:dd:ae:d4:bc:4b:cc:e8:89:a7:b3:de:82:e8:
d3:fa:14:07:4b:5e:af:39:63:81:4f:c6:ed:ea:17:
af:7a:45:83:13:4a:93:5f:9b:90:96:58:03:fd:96:
8b:dd:01:14:61:e0:50:f8:c7:db:a4:e0:51:59:8d:
11:ac:2f:fe:4c:a3:2a:c7:08:49:d1:b6:71:49:24:
a5:a8:19:ce:ba:5e:2f:35:e1:98:68:d6:62:17:66:
7c:f6:25:58:36:66:49:e7:bb:91:3c:fe:d9:14:52:
79:70:1c:92:74:ab:4e:4e:be:65:bf:1b:87:0d:83:
e6:5b:13:13:11:a3:3d:3a:c2:a6:bb:9d:66:41:37:
29:3e:8b:eb:4e:db:df:95:56:e9:8f:37:dd:d7:f6:
7b:0c:bc:52:8d:a3:6f:14:dd:90:67:ea:2a:33:ae:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:CA:E2:06:7C:AB:95:80:58:74:8D:51:72:5E:E8:88:9D:E1:7D
X509v3 Authority Key Identifier:
keyid:03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ad:a0:30:c7:89:e3:3c:1a:fd:44:be:08:ce:4c:cb:48:77:
85:8c:5f:b9:f4:67:e1:22:75:9c:d4:24:e6:c2:46:4e:7d:84:
46:ae:0f:09:c5:63:3e:40:18:3a:d4:9f:f4:89:e3:20:bc:e4:
5b:a2:68:67:b5:98:14:8f:b0:86:45:71:6e:8b:60:87:29:79:
bc:9d:96:bf:36:00:69:a1:ad:cc:e1:54:b8:dd:12:8e:c3:36:
8a:27:12:0b:9c:be:22:dc:20:ba:94:8b:cb:82:8b:1c:e9:0f:
93:d9:e2:6a:51:9b:5d:1a:0a:a4:14:1b:5c:64:1d:be:9f:21:
e4:1f:d3:ea:ab:3d:e3:d5:3f:c6:62:11:30:14:6d:2c:ee:80:
59:63:36:2e:7c:c6:36:79:5a:02:10:9e:08:1a:b8:9b:18:23:
92:22:e9:44:9e:c4:81:95:6e:36:23:79:36:fd:c4:48:a1:8a:
73:ba:e9:36:eb:03:f7:c2:4d:bb:9f:3e:5d:86:57:55:03:d6:
21:55:1d:ac:c6:a1:aa:0b:09:b2:78:a5:bd:b4:40:38:c4:c4:
03:00:a8:c8:0f:b2:68:47:11:f9:cb:43:2e:c9:4a:64:fd:24:
13:9e:ee:09:87:11:ef:e2:93:26:ec:de:56:5a:5f:6e:42:b2:
8e:45:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:48 2025 by rpki-client