Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
File: AVgEEYI7SHN2g27WavP4qrsgEZw.mft (raw, json)
Hash identifier: I8lnWLyHbnqQ1g3MOKuD3h1TxKY3IknhHyh/NbUoEJY=
Subject key identifier: 6E:97:98:0F:4D:27:EE:8F:8B:B1:9E:6F:71:58:40:7C:73:64:00:46
Authority key identifier: 01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
Certificate issuer: /CN=01580411823b487376836ed66af3f8aabb20119c
Certificate serial: 0194BBCDD4F7DC759CC3747B00DA1F0D8A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: AVgEEYI7SHN2g27WavP4qrsgEZw.crl (hash: EI8r52/ICIDQiXAWA16l7yBOj4NnglsTakuFXKmtWpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:f7:dc:75:9c:c3:74:7b:00:da:1f:0d:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01580411823b487376836ed66af3f8aabb20119c
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=6e97980f4d27ee8f8bb19e6f7158407c73640046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:22:63:01:d4:56:64:fa:bd:24:e1:c1:d2:
0b:5f:cb:24:d1:0f:1b:ce:fd:73:b8:f3:ea:3c:ee:
09:b6:5b:3f:f9:ed:ae:ac:ca:5a:4a:48:dc:a8:5d:
c0:71:5d:d8:16:85:7e:a1:b7:c9:2e:0d:86:d6:0a:
0f:83:5e:cc:a1:52:3b:f2:4b:86:15:5c:a6:b4:86:
cf:bd:74:3f:52:a6:4d:80:96:d0:e0:5a:17:02:5a:
7a:01:e6:67:f1:7d:e3:cf:d9:26:6b:7a:bf:79:a4:
3b:34:13:15:11:49:aa:43:56:e6:ce:b5:04:fd:a9:
a3:f2:c4:ed:2a:37:5a:04:49:75:3a:c4:4f:c8:30:
e9:76:a5:bc:3e:9d:73:5a:dd:f0:cc:1e:50:77:b5:
70:e7:6f:63:95:19:0d:c6:b5:8a:02:fe:88:70:77:
e8:75:e8:ec:bf:9f:4c:69:7e:e7:d6:8e:62:c5:51:
6e:ee:20:42:55:a1:8a:03:32:cd:02:89:d0:84:c6:
22:ad:02:f7:6b:2d:dc:9a:bf:93:6d:7a:c3:66:c6:
76:a1:d5:dd:85:ed:5e:11:d0:4e:a8:3b:13:eb:25:
26:aa:06:47:4e:8c:72:7f:83:0d:43:49:fa:87:a8:
3a:b0:fc:b2:9d:32:7a:f3:48:33:55:2f:03:da:28:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:98:0F:4D:27:EE:8F:8B:B1:9E:6F:71:58:40:7C:73:64:00:46
X509v3 Authority Key Identifier:
keyid:01:58:04:11:82:3B:48:73:76:83:6E:D6:6A:F3:F8:AA:BB:20:11:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVgEEYI7SHN2g27WavP4qrsgEZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09d667-b1c5-4521-8b5f-c18abecdd524/1/AVgEEYI7SHN2g27WavP4qrsgEZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:63:88:23:f2:ef:12:23:b3:42:3a:67:e3:26:07:8a:35:34:
3c:98:c8:e2:06:55:f6:4a:53:e7:a1:ac:2f:6c:94:08:9d:6f:
93:82:4d:b4:a5:10:b9:de:e2:23:24:c0:8d:41:8b:07:dd:be:
ec:0c:cd:ac:b7:79:4a:13:c1:9e:c7:7d:ea:8e:02:e0:f2:f8:
42:70:b6:e9:92:72:a7:af:47:46:08:dc:5e:14:3f:11:15:16:
90:17:29:5b:86:58:c0:d0:6a:af:9c:9b:a1:4e:af:3d:59:8b:
13:aa:b4:22:9e:26:c9:8a:ed:85:6d:ff:c8:d6:2a:1d:8a:26:
ce:7d:c3:f8:f5:ba:90:97:c0:10:2c:3c:29:c1:12:2f:25:06:
33:26:6c:56:2e:4e:d3:2c:24:e6:2f:1a:06:21:57:36:de:f2:
76:84:14:7e:9d:d3:45:ef:91:95:1c:06:4a:96:ff:cb:b5:0d:
34:60:04:c4:ed:cd:87:4a:fe:3a:dc:d9:8f:87:d0:9e:b6:2b:
42:b2:61:f3:6f:de:45:7b:ee:0b:82:ab:98:f0:fc:f3:22:cc:
ea:8e:fe:08:64:bd:e1:ee:04:0c:7c:a6:1b:fa:8d:33:15:f1:
91:54:9d:fa:7f:d8:28:74:cb:7a:18:99:5e:4b:d3:3e:99:db:
7a:a8:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:34 2025 by rpki-client