Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
File: aomTYnatLRhxB9-3QAeTADrBSac.mft (raw, json)
Hash identifier: 8QOKNw+LLnRG7uj+Rob39cJ814cwPp78wlRuUB4RVQI=
Subject key identifier: D0:9E:C8:08:46:62:C0:86:81:2C:F6:DA:F7:C3:9E:CE:31:2E:08:47
Authority key identifier: 6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
Certificate issuer: /CN=6a89936276ad2d187107dfb7400793003ac149a7
Certificate serial: 0194BD17B65906CDE3419113B4DA5B804387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: aomTYnatLRhxB9-3QAeTADrBSac.crl (hash: VQ1cZuyz+830qj9cq+n2FFkQe3SBP+HTfLJigDqvrpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b6:59:06:cd:e3:41:91:13:b4:da:5b:80:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a89936276ad2d187107dfb7400793003ac149a7
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=d09ec8084662c086812cf6daf7c39ece312e0847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:88:85:99:d1:8e:83:84:81:ca:f3:94:a0:
ab:41:8f:84:a7:86:37:77:04:62:7a:99:dc:78:c1:
e6:15:01:f7:45:10:79:22:8c:3c:4a:e3:17:ea:58:
20:3e:bd:4c:fd:57:f6:34:b5:c1:59:5c:a2:d0:fc:
88:12:46:ce:79:eb:8c:8e:60:7d:44:5b:7b:44:60:
93:95:67:f5:6c:40:41:a6:ce:ae:04:0b:67:a5:79:
f5:51:55:11:e2:24:08:a5:c5:12:6e:ee:6a:4d:d1:
3b:83:cc:e6:59:97:4c:7c:c3:b8:26:73:bd:99:fd:
8f:50:82:f7:3e:15:d8:82:66:27:2a:47:31:26:da:
5d:3c:68:68:22:ea:7b:df:9a:c9:14:5e:a7:10:1b:
8d:9e:21:c0:1c:0b:5f:28:d1:7d:66:8b:9a:00:db:
63:21:08:c5:ff:5e:06:ef:a8:46:5f:d6:4f:b7:f9:
8e:2c:a5:8b:ec:09:8c:59:c0:93:a6:1e:b7:e3:86:
28:56:bb:6f:39:cc:7b:d2:c4:4e:11:11:46:ac:5c:
f9:a7:d9:be:6f:ea:a4:f1:0e:ad:a6:2f:3f:48:42:
62:ca:1e:0c:68:6a:8f:28:da:c7:20:e1:25:d7:8a:
32:92:3e:4b:f9:3d:a1:a9:80:2a:fb:c6:4f:e3:ca:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:C8:08:46:62:C0:86:81:2C:F6:DA:F7:C3:9E:CE:31:2E:08:47
X509v3 Authority Key Identifier:
keyid:6A:89:93:62:76:AD:2D:18:71:07:DF:B7:40:07:93:00:3A:C1:49:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aomTYnatLRhxB9-3QAeTADrBSac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2ab62d-070c-4b06-b38a-73a7a4736038/1/aomTYnatLRhxB9-3QAeTADrBSac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:00:49:02:db:ce:24:26:5c:ea:10:a8:cf:8a:b2:a8:8a:
ee:64:c0:1e:b9:c6:89:51:7b:a6:af:70:87:04:3e:d3:36:c9:
e9:d5:2f:e1:cc:7a:ed:72:6b:0d:b7:ca:8e:a9:c3:f5:34:9a:
47:6e:c1:f2:bd:ee:f1:be:fd:76:84:64:3a:31:fc:81:90:c7:
97:bf:f4:06:e8:92:a0:c8:e7:62:d8:9e:f2:a1:22:8e:1f:be:
e9:52:08:b0:fd:b8:f5:b4:84:9b:06:06:a7:78:9f:0e:87:95:
80:75:0f:cc:e5:d2:5d:07:09:3d:0a:57:f1:f3:03:38:20:68:
ad:46:48:d1:d2:64:de:bb:b5:eb:63:8a:87:9c:cd:df:62:97:
5b:8d:22:c2:db:c8:2d:16:b0:bb:c1:6f:b7:0d:22:82:bc:0d:
23:2d:8b:f9:b7:79:82:09:b7:18:9e:01:3e:76:58:87:e2:31:
d7:67:9a:73:f3:13:56:98:db:ab:d2:b5:fa:5d:e5:8d:72:ad:
6a:1b:6a:dd:b6:37:0d:a8:f0:97:09:19:ac:a1:81:3f:9e:93:
11:9b:8c:c1:11:90:b6:1a:56:c7:12:cd:81:f7:be:d6:6c:0e:
f4:03:b8:29:85:fe:c7:38:82:49:0f:fc:1b:aa:a7:31:b5:3a:
2d:af:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:34 2025 by rpki-client