Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier: FVNkBbBS9vLSf2Tjtow0kBTqPyx1UnLpa1+UywqaOw8=
Subject key identifier: 22:C1:52:E3:85:FB:F5:07:80:83:FB:22:89:55:25:33:63:79:50:D6
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial: 0194BC728C250FBC6E478F324FB8FD48AC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: em7xbKPqc5dPtzb4WlSST883pM6QJkLNizMEWTPxSuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:25:0f:bc:6e:47:8f:32:4f:b8:fd:48:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=22c152e385fbf5078083fb2289552533637950d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:cb:1d:ec:ac:52:c3:2a:8a:38:40:48:42:
19:f3:a5:ad:c6:40:f1:de:dc:a9:ae:de:71:03:2a:
8b:c6:a0:e8:a0:b2:c9:81:1e:fe:86:33:aa:35:f2:
b6:e1:1a:82:67:39:0b:61:ce:13:02:ba:82:cd:bf:
38:27:f3:cc:86:41:e2:e0:4f:cb:59:ad:39:3e:88:
a0:18:bd:15:31:1d:59:55:ff:38:29:7a:1f:dc:07:
0d:80:92:e7:db:1b:cc:6d:5f:5f:51:69:aa:d7:e8:
01:11:3a:01:a6:4a:94:ac:55:0a:ad:ca:2d:c9:63:
6e:06:f1:52:49:37:93:25:17:a3:7a:42:c3:da:66:
e6:0b:d3:a8:41:99:fe:ac:bd:b5:39:52:a2:30:ed:
53:91:06:43:70:90:c5:4f:c2:98:b0:1c:11:c3:cc:
85:5d:34:34:cb:92:95:b3:85:cf:bf:82:6b:b3:83:
8e:e1:da:aa:ec:e0:e9:fd:de:1d:0b:1e:1e:5b:9d:
cb:f5:f4:04:41:c8:4d:0b:29:80:b2:f3:0c:f1:18:
c7:b3:c2:57:04:9d:34:40:fb:db:6a:aa:e5:91:e0:
64:f3:34:22:dc:7d:da:81:8f:17:68:0b:fa:09:56:
fe:32:f5:32:d7:38:38:dd:b1:28:7a:0b:8f:7c:e7:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:52:E3:85:FB:F5:07:80:83:FB:22:89:55:25:33:63:79:50:D6
X509v3 Authority Key Identifier:
keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:13:a9:dc:92:01:e9:51:8d:a6:f8:fd:04:e1:b6:d1:c5:0e:
4b:6c:d3:b6:d3:ba:db:70:1a:a8:03:6d:55:cf:a5:bc:d6:68:
c8:ee:4b:92:f3:5d:23:47:29:e9:cf:71:94:3f:6c:47:bc:96:
d6:12:8b:3c:63:ef:66:e8:01:54:f4:7d:4a:7a:7b:8f:23:eb:
51:ce:89:63:bb:3d:e5:13:8b:90:22:8f:f5:50:e5:dd:7a:e3:
8c:90:7d:ca:72:1a:d2:4d:54:53:91:39:1b:16:66:ee:f8:d3:
a8:3d:6a:9d:fe:df:aa:6a:48:95:90:a6:10:b0:e5:76:50:e9:
cb:fd:a2:6a:5d:cd:9b:51:25:0d:39:6e:40:8c:d9:da:38:29:
0c:52:ee:6c:ea:a7:e1:95:2e:2a:b9:9b:f1:8a:da:a1:00:c1:
0c:e9:47:6c:95:fc:c3:88:0c:c8:f4:3b:77:b5:ca:5f:59:45:
3c:da:c9:d5:0f:cd:4b:72:ac:43:9b:b0:d9:68:32:77:0c:0b:
0b:fb:a2:31:80:55:37:71:9a:47:2d:c3:d7:78:e3:18:73:05:
0d:34:e1:84:c3:ee:b0:1b:10:98:46:92:25:e4:60:1a:a5:1a:
83:5a:ff:da:22:04:29:5f:9d:81:99:0e:6a:0b:7d:d5:dc:fd:
7d:8d:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:59 2025 by rpki-client