Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: LsbjFKSgVqPfb3pWv0gs2EnAW6VUl76BYw9l9+CFM4g=
Subject key identifier: 37:4B:DB:51:AC:2F:24:8D:DF:3C:C8:5B:26:7F:2E:EF:E6:F9:98:5D
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 0194BBCEBE30847A5E36B5A0CBF0D4F18B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: s6Q5DkqioJlKpufHgwCeEAVA4GpiyDHlAaZZ+J+oZbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:30:84:7a:5e:36:b5:a0:cb:f0:d4:f1:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=374bdb51ac2f248ddf3cc85b267f2eefe6f9985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:a8:76:93:dd:e1:54:51:26:f2:c1:0a:b7:
9d:ed:c3:d8:ae:56:e9:6c:e7:c0:c4:47:25:f9:61:
87:bc:a3:4b:d4:d2:24:65:e7:76:78:ec:2c:b0:63:
0d:a5:f8:85:61:3e:3a:53:55:95:73:fd:5b:73:5d:
b4:86:57:27:47:59:f5:c4:68:25:ac:a7:8e:e6:0a:
49:28:db:23:17:d5:b5:54:82:a1:f7:a5:51:70:bd:
60:73:18:63:4c:b9:51:25:d8:36:4c:37:35:e2:28:
49:b3:f1:12:01:d2:55:ca:d6:dc:0c:e3:45:65:df:
65:c9:36:a3:4d:91:8c:b2:01:d9:6d:6a:a6:e9:5b:
fc:73:20:d8:2e:78:80:1a:97:66:03:b2:0b:ea:5a:
5e:be:0c:77:be:5e:84:6d:ac:02:0f:5a:67:58:51:
8c:7d:0f:14:f6:cf:be:68:2a:07:da:52:b3:bc:bf:
69:6e:25:d5:6d:e1:7f:08:a1:73:6c:92:cf:71:07:
b4:6d:3a:c2:67:1a:12:90:d4:b1:0b:3a:65:34:24:
15:27:c5:ab:dc:c3:01:d1:ea:8a:f9:1f:11:cc:2f:
c1:ad:2c:87:07:69:28:9d:c6:82:ce:dc:ae:62:69:
8c:94:1e:97:3e:bc:71:a3:d2:1c:41:ad:89:7f:75:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:DB:51:AC:2F:24:8D:DF:3C:C8:5B:26:7F:2E:EF:E6:F9:98:5D
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:c8:e9:4c:c2:0e:f6:40:26:95:fd:22:b3:38:37:11:19:
a7:0e:ba:c8:5a:60:74:62:fd:02:2d:f4:d4:ba:a4:79:54:57:
67:2b:89:96:3e:93:fc:c8:13:18:cf:8e:81:b5:15:81:83:ca:
a6:3c:04:3d:c6:32:20:12:13:91:84:74:32:e0:53:c7:a7:85:
48:16:1b:cb:52:cf:81:59:4a:56:96:54:aa:a9:98:ad:3f:65:
01:59:02:43:f8:e8:0d:45:c5:5e:e1:82:48:53:18:b1:57:f4:
32:94:e5:9f:1f:75:90:df:4e:1b:3f:bc:26:cd:7b:19:68:15:
43:14:b4:93:a3:06:5a:d1:80:77:97:17:03:10:c6:19:00:26:
08:c2:51:00:b3:7e:10:ad:50:79:39:94:93:99:2a:18:0f:0c:
1f:06:e4:5e:ef:1d:ce:32:26:9b:e1:4f:60:47:17:2c:dc:1c:
98:29:11:d6:33:44:b5:1a:2d:3d:f7:91:91:19:40:0f:ee:4d:
7c:92:39:ca:eb:e7:c1:e6:30:d8:61:1c:f9:4c:5b:1f:14:4f:
3b:9a:f0:1f:e8:52:93:05:f0:69:41:84:c0:01:be:a4:b9:8c:
16:75:e7:3a:44:33:95:d0:73:46:95:5e:93:37:e2:54:37:43:
e1:ec:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:31 2025 by rpki-client