Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: mlzToKdV9W778I8UN0zJoNtD0Qh9Qj7yjmZ/8mfOWKI=
Subject key identifier: 88:70:AF:94:6B:AF:C5:C4:6B:EF:29:76:2A:35:37:9A:D8:BB:36:5F
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 0194BD4E75706800771604B9DDDAF4C8DAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 018C
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: TzIHBO2Xo/lGN7c//bu8ByahDHZrNKGEE16cB4z3UP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:70:68:00:77:16:04:b9:dd:da:f4:c8:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=8870af946bafc5c46bef29762a35379ad8bb365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:d4:7a:81:09:f9:67:e3:c9:ab:f5:ae:a3:
f0:8d:8d:e1:ae:e8:b0:4a:69:8c:18:1b:01:75:92:
bd:a9:12:37:3e:49:1e:fd:c8:d8:c0:41:96:58:41:
b8:da:e1:7e:d7:22:bd:6d:26:6c:82:c1:fe:3e:7b:
8b:c8:14:4c:b1:2b:d1:7f:b6:9d:35:a5:2c:56:7f:
71:73:b2:a7:42:9f:85:4f:f9:74:97:fb:c3:0f:39:
1c:a1:d5:3b:b1:86:ba:06:68:9b:56:bc:c0:a4:c3:
64:49:e4:01:f9:2d:4f:47:2f:b9:22:3f:48:cc:11:
79:24:73:02:20:eb:04:9d:1f:78:3f:62:55:88:f8:
cd:41:38:cf:33:40:7a:1d:8b:9c:d9:30:29:24:ae:
f9:19:26:59:47:2a:d2:90:64:7b:13:47:83:90:e3:
aa:1f:70:79:a2:17:39:85:1d:08:cd:c9:0d:6a:63:
a4:b3:ab:d8:af:20:08:6f:a0:2b:c5:54:d3:f6:e5:
d7:4f:52:18:ba:79:00:14:1a:45:45:53:f4:6d:7d:
75:c9:cd:56:ae:f5:89:5e:fd:27:a6:32:83:fb:60:
23:78:21:eb:1a:1f:75:6c:e1:ce:3e:8e:b9:67:e5:
b5:a9:fd:20:17:d7:27:61:f5:b6:5c:74:d1:00:df:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:AF:94:6B:AF:C5:C4:6B:EF:29:76:2A:35:37:9A:D8:BB:36:5F
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b4:9c:a4:1f:84:6d:a3:12:b1:2f:d1:5d:d4:a5:e3:eb:10:
a4:ad:95:f5:58:1e:2a:b3:c7:30:13:61:48:27:e9:46:20:02:
e8:86:78:b5:ff:34:23:4a:1d:da:2e:17:86:b1:83:89:ce:33:
9a:9d:ca:ab:80:6c:fd:31:a7:c6:fa:5d:53:e3:c3:45:eb:0c:
34:76:ee:0a:4f:20:7e:e6:d3:1a:9c:e8:4a:43:e4:28:92:c6:
59:b2:a3:ad:11:3c:86:f9:f3:cb:dc:c7:aa:fa:14:44:06:95:
fe:e0:e8:9d:6e:4d:a6:52:5c:fb:6c:81:b2:c3:8d:2c:39:1a:
8f:37:25:9c:a1:7d:c0:da:52:dc:8d:ac:6d:f2:9d:1b:e5:7f:
46:f4:e6:1d:3d:2f:14:6b:68:d8:82:13:70:6c:4c:5d:d3:fe:
49:11:a7:39:a5:12:68:04:ac:a7:87:4f:e3:a7:c0:03:3c:ed:
2e:6c:fe:28:64:32:be:d3:af:c8:f6:3d:2e:d5:de:3a:bf:3a:
97:4b:d1:57:3f:f4:2c:06:e7:b0:64:17:e7:8d:0b:60:20:a4:
9e:7c:4d:51:eb:a0:c3:3e:e0:77:0f:c2:49:8c:81:66:49:75:
ac:44:18:a5:a5:dc:ae:a6:02:17:89:a8:5f:12:51:8d:d3:1a:
66:be:08:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:17 2025 by rpki-client