Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
File: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft (raw, json)
Hash identifier: fs2t71x9GNGT+nrFGroJ/gatrsMwgPqHih9dd+5XWJU=
Subject key identifier: A0:8B:4F:F0:7A:45:DA:C6:8D:F6:77:99:BB:CE:82:A2:A1:29:22:02
Authority key identifier: 6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
Certificate issuer: /CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Certificate serial: 0194BCAA39451A7B0BED041C42E1FF026932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
Manifest number: 6B
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl (hash: 5ZFKuLAbuEaA/YoHwQ371vuGOFRd65n0UQ1vRWSDvqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:45:1a:7b:0b:ed:04:1c:42:e1:ff:02:69:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aaee7bba32a8f93a4ccf5691c81d16d04b8508a
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=a08b4ff07a45dac68df67799bbce82a2a1292202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:13:5d:7e:f3:16:ee:33:4e:00:69:ec:07:
f1:14:d8:f8:fa:54:10:3a:9b:7a:ef:5b:ef:5d:9f:
2e:6c:3c:1a:83:ae:75:6c:b7:8c:68:94:f1:d8:72:
4c:84:78:27:63:d3:89:f0:f5:f5:4e:10:a2:0c:4f:
5e:1f:de:74:58:34:8c:f2:9c:57:5d:6d:80:b6:b7:
35:b5:a5:07:5d:df:a8:f5:cc:72:3f:e5:8b:85:64:
71:79:f6:55:fa:89:60:39:0a:68:05:3d:d3:23:d1:
46:19:1f:2b:2a:f7:50:b0:08:e0:62:5f:f7:db:59:
5f:70:22:cc:e6:9a:c5:11:ad:67:95:3e:57:82:2c:
dd:d7:45:49:7d:54:a4:9c:59:2c:7b:7c:f5:c3:6b:
82:07:f3:15:ba:e1:56:ab:ca:03:01:ec:44:1a:51:
c5:3c:e4:91:42:ff:a9:de:20:8b:5b:8f:cf:23:ee:
db:3a:52:3d:67:7f:7a:89:29:e7:41:7c:c5:8d:34:
e3:32:56:ca:5e:71:8f:15:43:d5:87:70:e5:45:29:
b2:68:2a:e6:d7:be:27:0f:0c:cb:e1:5c:29:0f:37:
a1:f0:dc:c3:ae:82:96:51:ca:ee:3f:24:8c:6a:18:
ad:fb:eb:1c:a6:ce:06:35:5b:41:97:22:68:3c:34:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8B:4F:F0:7A:45:DA:C6:8D:F6:77:99:BB:CE:82:A2:A1:29:22:02
X509v3 Authority Key Identifier:
keyid:6A:AE:E7:BB:A3:2A:8F:93:A4:CC:F5:69:1C:81:D1:6D:04:B8:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/23ad88-2f4c-4ef6-a9e5-5032a3ef254c/1/aq7nu6Mqj5OkzPVpHIHRbQS4UIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0d:97:d0:02:6a:7d:5d:32:e5:bd:73:60:ba:5c:63:d6:f3:
e2:01:b2:ab:ca:0c:af:b2:bf:54:8a:de:0f:c5:57:89:30:16:
d7:49:1a:f5:69:ca:b9:7f:1f:85:46:d8:12:cc:fd:01:d8:bc:
d3:e1:f2:f7:fa:a7:f9:1b:cb:6c:2a:eb:15:5f:00:5c:68:0e:
92:9a:ad:bc:f6:18:44:73:46:1c:1e:20:71:5d:8b:3f:1d:b6:
6b:16:3e:6c:66:fa:22:d1:71:18:f3:db:0b:3b:b3:1f:c9:c0:
cb:75:9a:88:f3:5f:e4:dd:30:0c:f5:a2:4d:a0:c1:fb:e0:8a:
ec:61:94:66:e9:bc:1e:02:2a:80:e3:84:f8:d3:12:92:9e:2c:
11:4e:e4:55:eb:1e:70:0f:2e:55:7e:e8:74:3d:dd:7e:d9:85:
60:cf:02:8b:6c:c0:c8:29:e8:15:ca:9f:4d:cc:3e:ec:49:df:
b0:f9:4e:c4:47:ea:1b:3f:cf:da:db:ed:84:83:d9:e5:db:1b:
65:d5:d3:ed:2c:46:a5:26:df:ba:27:3f:eb:3f:e3:a5:12:63:
af:4b:a3:f8:8f:f5:98:55:d1:f3:de:a9:54:57:31:46:61:dc:
dc:d4:3e:2c:2f:0b:ca:31:82:c2:5f:67:f0:8a:3a:d7:43:75:
e4:20:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:17 2025 by rpki-client