Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: EFbjufCCIdSt6nSTm4yh3vb0n2quodBg17/IkayChKY=
Subject key identifier: AA:A0:5B:7E:DB:75:16:D2:41:92:C4:3F:9F:DB:5F:46:B6:C5:5F:EB
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 0194BC72D4B374BF3FA8DDCB8D139A2DA273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: jGkJAbV7jPxQAYTHZqDf9PL9qlwwlqB1muyxtllNNnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d4:b3:74:bf:3f:a8:dd:cb:8d:13:9a:2d:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=aaa05b7edb7516d24192c43f9fdb5f46b6c55feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:91:ea:1c:fa:75:7a:46:5e:c8:f3:0b:fe:
96:39:58:f5:a0:6a:3e:c3:9a:d0:e0:81:e5:3d:7d:
00:78:f2:f9:3b:9e:02:49:f6:98:1a:20:48:60:29:
f1:f4:54:60:30:37:f6:ea:56:b7:31:19:8c:a1:e5:
8c:a5:33:6d:f1:a3:90:70:16:33:c1:7f:c8:81:29:
f7:41:03:4d:f5:0e:17:96:da:e6:3a:0a:94:0f:04:
cd:ea:f4:c3:5e:0f:ac:ee:43:41:f0:3f:01:4a:fe:
f2:7b:01:bd:b1:a6:d6:a2:e3:1d:ab:27:dc:17:6a:
5f:c2:fe:05:f4:10:a6:be:7c:24:3b:ca:15:f6:62:
ff:94:31:74:9a:07:f4:4e:4b:31:6b:60:27:89:ce:
62:e5:fc:38:67:41:d8:df:24:1c:1d:dd:41:7f:fd:
78:6b:66:d1:48:e6:3d:1d:e0:6e:4f:37:57:45:f4:
35:a8:dc:da:15:17:20:a4:b0:86:63:24:9e:51:ba:
55:82:4d:71:61:d6:c4:fd:76:f6:04:fa:d2:8b:19:
8c:46:ba:7a:db:54:a0:1a:bb:22:4f:7a:d5:7f:b0:
54:57:33:b7:b4:a6:fe:f8:40:ff:53:bc:31:50:38:
8d:a8:e0:47:52:a7:9f:cd:68:39:e3:56:82:d3:4e:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A0:5B:7E:DB:75:16:D2:41:92:C4:3F:9F:DB:5F:46:B6:C5:5F:EB
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:f1:35:75:49:f0:50:5c:30:31:ed:a6:50:2f:c3:16:6f:
26:61:b5:88:90:09:b8:b4:f8:32:b5:fc:e5:01:66:6a:b9:29:
ea:aa:a3:04:c0:10:36:0f:d8:d3:21:1b:4b:de:70:36:7e:d2:
98:29:ab:f1:74:b3:ff:dc:b1:c9:7a:ec:4c:a7:ee:e8:dc:e0:
39:6a:9e:8c:10:da:af:c6:ec:bb:a3:10:e4:3b:96:ef:98:e4:
a0:ac:e5:bf:8c:7c:89:61:d7:f4:c4:a0:95:51:e0:fb:00:14:
3b:37:3d:ba:7f:0b:73:b6:f4:e6:af:bb:1b:42:95:14:fa:32:
95:70:d4:27:ed:d6:e3:af:85:52:98:97:b9:90:93:8d:cd:1b:
9b:93:3f:c3:16:6a:ad:f4:b6:15:56:76:49:c5:9c:4d:12:86:
32:28:07:1a:32:56:01:7e:76:de:5c:12:c5:af:07:cd:05:38:
f8:3c:f3:0c:02:ee:07:ce:18:d2:02:60:24:6e:fb:80:ce:b4:
c1:1d:c5:e6:c5:61:b2:07:13:86:bf:ab:ed:f6:9f:3d:ed:eb:
fb:d4:d8:66:be:e0:27:6b:fc:94:bf:7c:fd:25:db:7a:36:84:
ae:13:d0:ea:04:a6:4d:5f:c3:d9:b3:13:00:73:f1:3a:09:6a:
8a:8c:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:00 2025 by rpki-client