Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: ockfkhw0rMEEfO3UBEuvlm8f/SykvfHJPu0HHwy/qKI=
Subject key identifier: 7C:6A:B4:9C:CB:62:57:9F:BA:85:58:F1:88:2A:14:66:26:9B:29:33
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 0194BBCE1A4191E43F8435E7AA54101135A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: FQATkoZLmkB7TLzRjL5Ilut3BeJTOG/V+gX4dEagD4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:41:91:e4:3f:84:35:e7:aa:54:10:11:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=7c6ab49ccb62579fba8558f1882a1466269b2933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:18:01:84:ac:72:b4:a5:87:c5:5a:77:bf:
05:c1:f8:68:52:a8:e3:6a:1f:e2:35:f9:af:38:4c:
c0:ff:94:b6:85:dc:28:91:5c:e6:3c:4e:c8:22:07:
b5:04:17:62:ff:43:cd:e5:35:81:aa:19:15:06:dd:
e6:3e:95:d1:b8:83:d7:7c:ee:0d:b6:1d:fa:9b:03:
5e:42:28:50:5d:23:ab:54:39:96:4b:4a:22:02:90:
c7:14:cb:7d:cd:37:b5:14:04:94:bf:b8:ef:ac:fe:
68:51:73:d5:89:16:a6:a1:e3:b0:02:93:03:42:b8:
d8:05:e6:c4:7e:30:4f:aa:8a:fe:a6:12:24:e3:66:
8a:ff:cd:7d:c0:95:42:66:d4:27:4a:5b:82:c1:1e:
62:79:2a:39:2e:85:17:a0:34:3e:c2:df:1b:88:15:
9e:29:c7:28:1c:2d:07:7b:7f:9d:a0:4e:c7:a7:fd:
04:22:3d:fe:eb:f5:fe:ed:18:93:71:0b:a4:c9:80:
fe:ec:9f:11:f4:74:13:6c:4d:ea:a1:f9:c4:a4:52:
83:51:a9:d8:cd:98:8b:d0:7b:3e:e2:7b:ec:b2:74:
cc:c4:67:09:8c:36:f2:b5:ac:a5:76:55:52:35:a2:
47:5e:61:0b:12:ab:e3:9e:6e:1c:37:a7:40:28:dd:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:B4:9C:CB:62:57:9F:BA:85:58:F1:88:2A:14:66:26:9B:29:33
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:98:b6:d6:8b:23:de:6d:0e:df:5e:78:79:46:25:90:fb:ab:
64:26:ae:b5:5d:c7:93:33:f0:95:36:b7:d5:4f:83:40:6d:48:
f4:7d:ca:08:0a:2a:20:5d:36:fb:c1:7a:7d:b1:58:6f:65:20:
a7:f3:bc:70:39:5a:37:00:2b:9b:f2:42:0a:69:94:bc:02:96:
5e:42:0b:e8:ff:7d:fd:ce:c8:03:e8:13:1b:c5:2e:1c:28:e3:
69:2e:33:ad:41:c3:14:fd:e0:e2:d9:00:37:16:c3:76:70:28:
77:d0:7e:61:8a:ed:98:bf:6f:e2:11:ca:2a:85:0a:8f:ad:2d:
9f:b2:41:3a:a1:25:d6:0a:78:de:26:96:5f:66:f8:cb:2d:f6:
d8:97:41:ce:c3:e8:c1:f1:57:92:5c:4e:ef:11:0b:d6:bf:df:
56:73:51:07:b5:33:fa:3e:fa:1a:f8:4c:86:a0:f7:bb:a0:1f:
36:43:90:b4:e1:1a:17:b3:a7:f0:0b:03:ff:ab:eb:9b:9a:23:
50:d9:ed:bb:66:40:ed:85:dc:a8:fa:e8:c2:f3:32:70:9a:09:
a8:6e:04:23:c7:11:49:00:05:40:10:18:01:b3:b5:11:85:4b:
ab:51:96:e3:18:10:3d:3b:02:36:46:26:e2:3e:e2:07:48:9c:
5d:56:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:58 2025 by rpki-client