Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: ZNyEL24yF03GfemEmeyAHMMrDtCPVIs9MO4z3td+New=
Subject key identifier: 8D:7C:C2:91:93:81:39:30:52:82:C5:CB:77:89:38:96:5A:B8:AF:CE
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 0194BBCEE30E62F629E479FB8F8B4BE0B7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 0BD5
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: rLKn+5SczDgoaDDSWRo2GrYAvdTwjEkhzE/23SwuG4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:0e:62:f6:29:e4:79:fb:8f:8b:4b:e0:b7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=8d7cc291938139305282c5cb778938965ab8afce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:86:c1:e8:7f:08:d5:7f:a6:0e:2a:f8:1c:
74:6c:fb:f4:78:2e:bf:6d:0d:d7:85:17:f9:80:9d:
9b:be:67:8d:1f:8a:53:f3:13:ae:e1:49:08:a2:85:
46:df:92:7e:fb:36:96:98:b5:25:87:48:95:6c:63:
85:09:fb:bf:45:d8:31:8c:19:19:c5:89:5c:f4:a7:
d0:f5:fb:bb:f2:ad:df:17:69:4a:d3:4e:eb:4d:3e:
98:bb:32:51:d4:3d:af:fa:2b:68:8c:34:25:3b:76:
25:cf:ef:49:5b:bc:e5:ea:b9:d2:b1:15:ce:40:72:
7a:15:07:27:96:98:7e:64:35:4b:06:10:bc:5d:48:
27:ad:b2:38:bc:9a:51:78:92:af:9d:de:c3:ca:b6:
72:94:e4:e8:6c:6e:5d:21:6a:ac:64:00:cc:3b:60:
ee:39:e1:3d:64:a3:58:4f:99:a5:de:a8:fc:d0:fc:
b2:25:f2:4e:c9:18:2c:36:f2:0b:1d:58:c8:de:db:
54:94:70:9f:57:15:12:8c:52:61:ae:3b:95:c6:88:
c9:e0:e4:b0:d8:4a:12:d2:19:ef:f2:77:33:19:5a:
ee:de:ba:04:cb:cf:9e:e4:23:8d:b0:fc:ef:28:6c:
b6:be:ff:88:fa:99:27:d6:f5:f9:a3:62:07:54:97:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:C2:91:93:81:39:30:52:82:C5:CB:77:89:38:96:5A:B8:AF:CE
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:a9:88:00:39:19:04:92:fa:69:e2:cd:e2:fe:36:83:6e:
f1:ab:f6:de:6a:60:ec:d8:7e:e2:0d:69:d8:a0:90:e6:5d:e2:
c1:c1:ea:7c:94:85:42:d6:c6:6d:a4:2a:ca:12:ab:05:45:da:
8b:4d:88:b0:ab:70:bc:d5:c4:3d:89:27:88:92:0c:70:00:07:
72:5f:33:cf:fd:c9:57:9f:29:ca:af:1b:07:56:fa:ab:68:0d:
5e:84:9d:2e:56:83:27:ce:40:9f:a3:6f:45:a5:0b:3e:d9:fc:
f0:cb:2b:21:cd:17:54:eb:4c:77:4f:d0:08:ee:e1:f3:7d:e8:
79:17:b7:37:24:a5:25:bb:f5:50:0f:dd:db:32:65:52:bd:81:
e2:90:42:c9:9b:0c:2b:b5:62:a9:c3:64:66:40:f8:ff:c2:9e:
c3:1a:14:51:ec:e0:83:cf:ac:c0:17:35:9e:86:d5:53:43:63:
7c:59:da:6e:9b:6d:dc:3e:ed:5d:5d:d4:b9:d8:84:2f:ff:7c:
28:4b:05:f2:7e:c0:30:5c:f5:97:02:61:de:6a:23:28:10:a5:
d0:91:8a:22:23:7d:51:8f:6d:a9:2e:7e:9d:20:98:31:dd:48:
d7:34:87:2a:8b:56:56:12:47:50:34:4f:3a:1f:2e:bf:eb:f3:
dd:95:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client