Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
File: AlAYGVXVQR9QbrpCutueWqXdhEM.mft (raw, json)
Hash identifier: a9GZK9EiNmAdtAaJmxcE2Euz66QECqre+GpdwUh/kuk=
Subject key identifier: 1F:EF:44:0E:DC:A2:74:E9:D6:87:1D:1E:E9:6B:C8:9F:F9:AE:4E:7A
Authority key identifier: 02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
Certificate issuer: /CN=0250181955d5411f506eba42badb9e5aa5dd8443
Certificate serial: 0194BC72E29B900D0BDE9853F1820DF3C4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
Manifest number: 10D6
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: AlAYGVXVQR9QbrpCutueWqXdhEM.crl (hash: ApQF+Gj+XcH9fQMHpwtnclHGCW4c5PkEP1WBbdNrqgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e2:9b:90:0d:0b:de:98:53:f1:82:0d:f3:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0250181955d5411f506eba42badb9e5aa5dd8443
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=1fef440edca274e9d6871d1ee96bc89ff9ae4e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:c1:0e:20:b3:43:fd:48:e5:a5:05:33:a0:
2f:05:94:e1:ad:64:54:99:50:43:8d:79:cf:5d:d3:
a1:01:68:83:29:29:9a:f3:28:f1:21:d4:21:55:84:
6c:98:c5:6e:ce:bb:9a:28:cb:ed:a4:5b:0f:e4:40:
4a:87:b3:d2:ce:12:ff:5d:12:7b:07:08:c2:fe:a6:
ee:ae:41:08:a8:f8:d7:17:da:ad:6c:b6:6f:1d:24:
d1:72:a2:fe:ed:4c:35:64:8c:80:f3:da:a3:a0:96:
4c:0e:27:33:5d:f7:d5:41:37:25:0b:e9:10:44:cf:
e7:16:c6:95:c3:ed:82:03:42:9d:d4:b2:70:9d:e1:
a2:da:05:25:7d:c9:3a:0f:94:cb:68:16:7e:4a:02:
e9:55:bf:97:a3:f2:33:03:8e:f6:a3:c1:30:aa:8b:
f8:4a:35:81:d4:bd:45:fe:53:9c:4d:56:2d:44:f9:
41:7e:e4:5f:78:97:72:59:dc:df:75:78:7c:8a:69:
b8:7a:6d:6b:7f:65:a9:aa:57:07:f7:0b:95:c1:74:
2e:66:c8:fe:3b:4e:35:b5:dc:52:be:29:4c:93:8a:
a8:0f:39:a5:3a:fd:cc:2e:cc:1b:79:66:63:02:70:
3c:65:8c:c3:8a:92:d2:2b:e6:7f:cc:24:c3:30:f6:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:44:0E:DC:A2:74:E9:D6:87:1D:1E:E9:6B:C8:9F:F9:AE:4E:7A
X509v3 Authority Key Identifier:
keyid:02:50:18:19:55:D5:41:1F:50:6E:BA:42:BA:DB:9E:5A:A5:DD:84:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlAYGVXVQR9QbrpCutueWqXdhEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b10771-066a-44b0-91f0-57f209f9506a/1/AlAYGVXVQR9QbrpCutueWqXdhEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2c:9f:01:29:e6:ed:0f:4f:11:d0:d4:b7:a5:8f:68:38:60:
e5:37:47:9a:10:6f:b2:ab:1c:05:5e:7d:6b:57:27:40:2a:e7:
c6:35:96:74:71:42:0d:ca:7b:03:ba:9e:79:ee:3c:be:c7:a1:
ed:5e:ee:d2:d9:37:24:42:12:dd:2b:5a:04:48:2e:3c:75:7a:
0a:80:4c:b0:73:4e:e4:33:71:5f:07:54:f2:b7:19:50:46:be:
90:e7:7c:72:fd:94:ae:48:1d:c7:2e:a7:ab:91:a8:1f:80:09:
be:ac:23:c1:76:bf:cb:57:41:16:40:c4:22:3d:83:a5:23:97:
1a:6d:5e:44:42:4a:c0:fd:23:9f:fe:3b:cd:54:23:9e:a6:fd:
80:0b:e4:12:b3:32:62:d5:27:05:6a:b1:6c:73:8b:99:4c:9b:
43:97:b2:7f:dc:bd:31:ca:43:c7:9e:f4:a7:cd:bc:35:86:91:
78:ac:27:c5:44:23:d1:92:32:cd:93:ae:b1:92:5a:fe:14:a0:
2d:27:05:ba:e9:72:84:54:eb:47:85:0e:43:9f:ac:51:62:a2:
a4:96:c3:2c:63:03:9f:ce:a1:dd:0a:b9:3d:27:9d:0f:bf:cd:
e7:15:94:9a:57:c0:2f:6a:9c:ff:9b:a2:8b:c1:8a:9e:7d:fd:
e8:7b:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client