Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
File: avtfHyEUagk_P9rQxr_3V3avN8Y.mft (raw, json)
Hash identifier: //s3gei1d2QU/3xblD29GtTGetiGcXViPSjetaiDD58=
Subject key identifier: FF:7F:26:2B:90:81:EB:BB:8D:20:47:F7:92:9D:ED:16:DA:3C:28:11
Authority key identifier: 6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
Certificate issuer: /CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Certificate serial: 0194BBCDDD54FC4B32D5094C2081D4A9A446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: avtfHyEUagk_P9rQxr_3V3avN8Y.crl (hash: GvQg6hl9z3SjgdPlm4u/DbjFwPNe4PnKKt+kuy/r8Aw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:54:fc:4b:32:d5:09:4c:20:81:d4:a9:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afb5f1f21146a093f3fdad0c6bff75776af37c6
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=ff7f262b9081ebbb8d2047f7929ded16da3c2811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:6c:74:fd:e0:9c:d7:86:5d:b6:3e:69:7b:
9b:dc:83:dd:ef:0b:77:36:d7:ab:31:99:4b:50:9a:
dd:4a:16:0a:4b:03:fc:62:f1:ea:e5:6d:e9:fe:51:
03:a3:7e:15:f8:f9:f6:6f:e7:10:21:d7:3e:33:1c:
8f:a9:3c:16:12:fe:0d:01:0a:9e:05:84:73:22:02:
c6:5a:f2:ab:50:b3:35:e2:26:00:b5:73:5e:4f:5d:
94:bc:89:7f:10:ab:eb:6e:ac:54:65:29:78:dd:94:
19:f1:45:9b:d4:17:a3:af:50:51:de:b9:e4:39:f6:
58:59:00:bc:28:ba:76:64:0a:3e:76:5c:9e:52:f4:
37:77:62:6f:29:2c:97:05:21:bf:a8:b5:db:6d:43:
5d:2e:68:ce:34:b0:08:8a:b7:17:60:ed:9a:43:5e:
2e:54:ea:72:32:25:84:d3:bc:ba:20:44:81:a0:23:
43:b7:d2:f7:93:13:41:5a:16:99:bd:88:d7:5c:77:
71:ec:b0:32:64:0e:51:a9:41:ab:37:90:99:fa:7c:
bb:58:59:2c:86:f6:4f:4c:67:b4:93:04:62:f5:f7:
5f:ba:75:21:c7:75:4f:47:ac:cd:a9:76:1f:a0:7b:
0e:4f:2d:8f:fb:9d:57:60:4c:28:7b:43:cd:18:d6:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:26:2B:90:81:EB:BB:8D:20:47:F7:92:9D:ED:16:DA:3C:28:11
X509v3 Authority Key Identifier:
keyid:6A:FB:5F:1F:21:14:6A:09:3F:3F:DA:D0:C6:BF:F7:57:76:AF:37:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avtfHyEUagk_P9rQxr_3V3avN8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e3c0c0-2383-48d5-8618-f98b9d227a94/1/avtfHyEUagk_P9rQxr_3V3avN8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8a:7e:bd:1b:68:0d:2c:7d:66:79:5d:30:8e:6c:57:d5:5d:
48:81:e6:67:5a:60:98:cc:ff:8a:4e:40:f3:d3:7e:16:0d:6b:
27:7b:c4:6e:48:e6:07:9d:af:7a:c1:56:75:ac:a0:1e:88:8f:
1a:29:77:20:04:28:6d:47:05:1b:13:af:0d:4a:65:2c:a2:9e:
25:fe:71:06:b3:db:17:51:d1:f0:31:03:cd:9e:42:25:a3:a1:
79:f6:a7:52:bd:ee:45:26:e5:17:87:09:fc:c5:be:b2:8c:18:
1a:92:e0:d9:30:34:72:1b:07:af:d0:ef:5a:c7:7c:e9:e6:c1:
e4:d1:d2:63:fe:3b:b3:62:9c:25:e1:0f:56:b9:a8:7c:32:67:
cc:52:12:45:15:f7:48:0e:a9:e1:a0:6f:10:b8:31:45:40:8b:
9c:48:2a:ac:1b:48:b1:9f:89:66:9d:cb:be:ab:76:a3:44:87:
d7:ec:1b:7d:8f:f7:29:14:eb:81:4e:7d:89:c5:f6:ee:af:c8:
c1:82:de:eb:55:c5:96:e0:b0:8d:e3:18:c7:ca:0c:ba:06:03:
4b:67:ae:e9:14:4b:04:3e:9b:6f:8d:1f:2f:c9:eb:a8:20:03:
ab:96:43:d7:fa:3b:2c:9c:0c:59:60:1a:43:b7:d2:c3:42:6e:
25:d4:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:51 2025 by rpki-client