Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: dbn7aEscBoyTCPo7l4z0wfZYSjPpuP8OjK3j3ta/Wtk=
Subject key identifier: 4D:75:41:C4:68:EC:F6:9F:5F:C3:08:29:F5:F8:29:81:01:6D:98:83
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 0194BC3C4BC7931F226FD4F28D147E6F7C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0B9D
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: K3-P0BjiGGZ4nzbeNELzqEVRUXQ.roa (hash: mZAxldt+IlCpLOehWxq3yA+3IoToCcsVOjUlUqrfi0s=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: ci3HcgZLnYvotMblDb4RLemFM+qoXDUmPWldX5a7EOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:c7:93:1f:22:6f:d4:f2:8d:14:7e:6f:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=4d7541c468ecf69f5fc30829f5f82981016d9883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:a4:4d:a7:57:82:d2:ce:cb:0f:e7:b2:03:
a7:d9:94:ae:57:33:29:99:c1:00:d8:bc:5f:e9:22:
92:61:c3:e6:1a:df:e6:65:37:5e:91:69:a3:13:ba:
c7:63:a7:d7:ac:fa:0b:27:77:57:ba:8a:c4:4b:7a:
db:f2:41:42:44:bd:e7:c3:d1:d2:b5:36:7a:af:07:
e2:b7:be:aa:76:3c:c1:61:0f:19:63:b5:fd:d1:61:
95:9e:c9:a6:ed:cd:27:26:7a:42:7f:31:7e:f2:7e:
9e:fb:1f:75:42:3e:c3:2a:5c:86:c3:9d:9d:db:d9:
06:4f:c0:86:a1:68:42:fa:e5:5b:e0:2d:af:7b:f9:
aa:63:dc:c8:59:29:55:ec:45:eb:21:d4:5d:61:b4:
64:2b:12:60:c5:f5:60:94:d7:63:f4:9b:6d:13:fd:
4c:57:bb:84:6f:88:d5:fc:b3:7b:2d:2a:09:65:74:
72:7a:d6:3f:37:aa:57:ae:3b:6b:d9:ed:85:02:3d:
1d:14:5f:bb:e9:bd:65:b0:40:be:e6:07:c7:2a:be:
a6:59:f7:35:5e:74:63:b1:a0:61:81:ad:79:71:51:
29:91:4f:91:43:f4:b0:3f:57:01:16:ad:b1:2d:af:
81:8d:6c:6b:d2:37:c1:2a:8c:95:e4:f7:54:2d:29:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:75:41:C4:68:EC:F6:9F:5F:C3:08:29:F5:F8:29:81:01:6D:98:83
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:4d:aa:a1:0b:c6:62:54:71:50:2f:cb:e9:a9:aa:2c:76:
57:e3:f8:0c:b4:0d:ca:38:24:8e:51:19:8a:8e:5f:33:03:0f:
84:27:3c:c9:1c:4f:6a:a5:5c:ff:ce:6c:b7:28:88:49:d5:3b:
f9:2f:1b:de:e9:d8:bd:e5:2a:ec:04:27:e5:96:96:db:3a:7a:
f2:38:30:51:4a:15:48:fe:f5:55:71:33:e7:71:1b:d1:91:d6:
a6:28:41:2b:b7:0b:59:23:fc:20:bb:a2:b5:df:f1:ab:cc:4b:
89:7a:27:b6:bf:e9:7f:85:64:eb:33:41:cc:4e:9b:39:99:98:
14:41:f8:3f:99:89:c8:b5:ac:1f:32:f9:09:3d:2d:aa:99:ed:
02:44:26:fa:60:10:9e:6b:bd:51:c5:94:47:04:cf:58:de:d3:
cb:2b:3b:0c:d7:37:aa:a9:d4:b3:40:d7:ab:c8:de:7d:3c:22:
33:ca:fc:cb:63:f9:e8:dc:d0:87:2a:7b:05:ef:ee:b5:70:2f:
78:e1:71:d0:a3:fb:a9:2c:e6:5a:c4:b2:5b:19:a2:aa:94:b4:
66:c2:0f:36:4f:c3:1b:62:14:b0:1d:23:cd:3b:0c:16:0b:f4:
9d:bd:98:6e:93:cb:b1:49:9e:8d:63:b4:28:ad:5d:44:d6:31:
d9:e4:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:34 2025 by rpki-client