Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File: agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier: K3DVeNwjtFlI7yzw1QgDYDIRZKbrTukMb0X6UGKe4rs=
Subject key identifier: 7D:65:AB:11:B9:2F:67:05:28:B6:A3:E8:3A:C1:F0:7B:33:63:92:FD
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer: /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial: 0194BD17BB951ACB09A38ED439256F15836D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: LR5UPpmtWnxBUf5LwoCJap+i7qbGIrGPSynshluKOdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:95:1a:cb:09:a3:8e:d4:39:25:6f:15:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=7d65ab11b92f670528b6a3e83ac1f07b336392fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:f2:66:78:26:e3:2f:a9:bd:aa:b2:e1:ea:
1b:25:86:26:a0:31:85:70:ce:12:db:5c:66:49:7d:
ca:a4:ac:e2:3b:76:ca:5d:70:db:f4:9f:d7:9c:c9:
eb:24:48:5d:51:5a:8f:19:c8:28:cd:a9:83:2e:32:
ef:00:45:84:85:67:e7:7f:5f:f2:0c:28:2e:ef:30:
c8:95:db:1c:75:e5:c8:c4:69:33:dc:a7:24:e1:82:
80:35:d3:41:e6:b3:87:25:84:34:ab:a6:46:11:19:
20:62:d0:75:c2:00:0d:8f:26:71:a9:23:89:ca:c6:
e9:ef:a1:a3:1a:5c:a2:b3:13:e5:49:35:72:e0:0d:
2a:52:6b:e8:7e:71:32:37:8f:63:f1:b0:7f:67:14:
31:be:d1:2d:ce:b5:77:22:98:c5:68:78:36:80:3b:
4c:2e:dd:5e:2c:6a:0c:7f:e4:2f:26:ed:f5:20:3b:
4e:a1:cc:3f:f7:69:1a:18:d1:34:6e:fd:8c:88:72:
40:99:c0:22:2d:b9:e4:26:33:5e:db:f2:1e:51:16:
49:4d:13:a9:c1:14:d1:9e:5d:ca:fd:b6:8a:4a:07:
c3:46:4c:50:6c:44:d6:f7:39:b6:1d:6e:d4:8c:fc:
f4:f4:16:d8:94:e9:3d:1a:45:15:62:c9:b0:8a:74:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:AB:11:B9:2F:67:05:28:B6:A3:E8:3A:C1:F0:7B:33:63:92:FD
X509v3 Authority Key Identifier:
keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:87:34:6a:ad:f0:52:ea:9e:73:87:0f:1c:65:eb:2b:d6:
70:a5:3e:35:00:d6:07:3e:c4:70:80:cf:09:f8:b8:62:8b:48:
bf:c7:dd:13:16:d6:a6:fe:6f:f4:88:8a:7b:cd:3b:b4:a7:d2:
43:4a:03:09:b7:ef:2c:2b:25:16:f6:bf:ca:d2:d7:8c:8d:eb:
d4:18:d3:01:11:70:d8:29:5c:b5:52:95:3f:e4:32:6d:f7:8d:
eb:6e:d4:73:8c:05:51:90:a0:bd:20:ec:e4:f6:24:fd:6f:91:
4f:70:fa:7a:0c:de:bb:e4:be:e9:a0:e0:f6:0d:fb:58:de:9d:
19:e1:06:20:66:08:5e:73:75:6d:22:79:1b:5f:a0:52:a6:18:
ba:0d:5d:97:fd:e2:f8:0a:ff:ba:5b:aa:f7:31:cb:d9:1b:3b:
02:28:ac:7f:cd:80:61:02:97:b0:0b:03:45:c1:81:a9:d1:2c:
f4:c2:28:43:ee:56:60:46:43:fe:6f:bd:75:ec:cc:ce:f7:cb:
c1:b2:e5:b1:a0:7a:ed:8b:34:70:53:60:2a:ee:37:f7:96:76:
8b:ba:48:3d:10:d2:aa:1f:54:ee:df:f7:a2:44:93:40:22:71:
6b:ce:af:4d:ee:e9:7a:a0:56:d2:b9:3b:33:fe:0b:0f:ac:60:
31:13:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:02 2025 by rpki-client