Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft
File: Su3gwav6sSsMyZTOsd2_LA2t-iY.mft (raw, json)
Hash identifier: 6NlSTKnodfPgKWC+IsgL1NlbWo6zHXuRB5mCwJZNaK8=
Subject key identifier: AA:16:53:D6:FB:19:82:35:AE:76:3A:3E:65:12:ED:3E:39:90:D1:19
Authority key identifier: 4A:ED:E0:C1:AB:FA:B1:2B:0C:C9:94:CE:B1:DD:BF:2C:0D:AD:FA:26
Certificate issuer: /CN=4aede0c1abfab12b0cc994ceb1ddbf2c0dadfa26
Certificate serial: 0194BBCED00256190A2717FD95E9E4A30E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su3gwav6sSsMyZTOsd2_LA2t-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft
Manifest number: 0A1B
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: Su3gwav6sSsMyZTOsd2_LA2t-iY.crl (hash: 8hFqnibAS2zZj0u5d4eIWzlsSp2gjFoGtqRKud8f74w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:02:56:19:0a:27:17:fd:95:e9:e4:a3:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aede0c1abfab12b0cc994ceb1ddbf2c0dadfa26
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=aa1653d6fb198235ae763a3e6512ed3e3990d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:52:97:aa:f7:a1:7e:71:04:d5:60:cc:b2:
53:c8:66:09:3f:9e:f9:78:d8:97:55:61:13:3b:87:
a0:ff:5f:e0:04:14:8b:a5:82:89:2e:66:fd:f6:18:
89:76:53:03:09:5a:36:ef:11:cf:96:dd:ce:4e:29:
b7:3f:e0:23:12:fa:bf:32:f9:d2:ee:e0:b0:c3:67:
d4:02:e9:84:c0:16:b5:ec:27:c5:ec:dc:02:ae:86:
48:59:85:72:c4:e7:b2:44:74:79:35:8e:43:25:8e:
39:d0:3b:25:91:b1:4b:f8:57:b9:7b:5c:0b:df:dc:
54:c4:1f:42:ac:18:76:1d:32:fc:89:64:e9:bf:ef:
ff:e1:a9:19:41:c1:63:57:b3:75:00:2f:6b:ce:d0:
22:66:f1:96:eb:ee:21:44:3d:3d:88:ea:a6:b5:25:
ec:f4:fd:e5:ed:c5:83:11:7b:b6:5f:ac:be:c6:63:
9b:5e:76:91:c6:b3:9c:f8:f5:40:81:74:91:41:5f:
5b:9b:8f:43:b2:b1:3b:33:a5:60:23:57:23:49:f1:
38:68:87:18:16:32:b1:60:04:11:19:e0:36:0c:e5:
3f:5a:06:d4:4c:af:12:e1:f3:cd:70:f0:29:0e:b3:
53:24:31:45:75:78:96:00:99:f9:b1:f3:af:b2:09:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:16:53:D6:FB:19:82:35:AE:76:3A:3E:65:12:ED:3E:39:90:D1:19
X509v3 Authority Key Identifier:
keyid:4A:ED:E0:C1:AB:FA:B1:2B:0C:C9:94:CE:B1:DD:BF:2C:0D:AD:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su3gwav6sSsMyZTOsd2_LA2t-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/289567-937a-402b-b1bc-2c555c9e911d/1/Su3gwav6sSsMyZTOsd2_LA2t-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1d:02:c3:eb:db:24:ee:55:5c:31:b8:83:c1:4f:17:29:80:
8e:22:8a:7b:48:c4:9c:ff:dd:8f:d0:ac:2c:b4:4f:08:17:12:
fb:e6:7a:5a:aa:cb:58:13:12:ce:fe:a3:2f:9a:fc:11:4d:ca:
30:58:71:58:56:35:80:36:22:74:ad:3c:c0:ed:55:95:c9:0d:
f5:03:a3:67:bc:78:49:39:c3:58:63:f4:86:fb:e0:7b:b4:fe:
f7:17:dd:a1:b8:b4:e0:78:de:73:60:32:66:60:72:79:2d:c9:
eb:4a:54:e5:47:f8:3d:2b:92:66:04:ac:d6:bb:a5:03:f1:79:
13:bd:a1:ee:f9:28:e5:1f:8c:b5:23:19:34:55:1e:11:a1:e6:
09:c4:77:e3:60:19:d5:94:f3:bd:12:4b:2c:3c:96:e8:cd:c2:
d9:71:64:25:fc:c5:db:c6:61:a6:bd:b8:5b:18:59:90:81:22:
36:76:df:85:ac:e5:9b:89:50:13:e7:dc:f8:04:0c:91:e4:09:
c5:cc:1a:36:ab:44:ea:4c:a0:79:ac:18:c9:15:1a:85:33:b0:
a5:ab:b5:73:33:4e:ca:f1:a7:3f:7a:aa:dc:71:10:9e:5a:0a:
67:ed:db:b9:f9:bc:9f:9c:e9:8d:e9:43:ff:aa:a7:64:c6:6d:
11:3e:19:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:58 2025 by rpki-client