Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: wB5E8ama5y7RsrvAUEQvp7NDHPoIBple03+wleGCjr4=
Subject key identifier: F7:48:A8:91:A7:96:66:22:EB:1D:BD:6C:B5:C4:C7:96:94:72:C4:E0
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 0194BD85A3B5DEBDCBC3D9ECE206CE961152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 1127
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: WdvR2iX+IEwTt0LbldnzTN+PmE6bI05nMPZ1H6DQNU8=)
2: ntOMxIeMhr-P2kPbMPUoMu_pVTw.roa (hash: L+3qj6bnJM4B6HcuOJiFgE8okn2o6USIpevCWtSI9V4=)
3: on0Eb8DLw5yo7ERsBMlPbYsTuDw.roa (hash: ItajaA8/b84P6Za11CUhjcsIeCXK2t3vB+hMRKaYKy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a3:b5:de:bd:cb:c3:d9:ec:e2:06:ce:96:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=f748a891a7966622eb1dbd6cb5c4c7969472c4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:e3:56:5b:ef:44:0f:f7:49:2d:2a:f2:a2:
66:ea:fd:45:ff:35:f4:8d:89:35:48:e1:51:bd:49:
8e:f2:b9:fe:28:61:59:9a:54:7a:cb:b8:36:0c:95:
83:96:6b:7c:23:a6:6d:b6:7d:49:77:83:78:9c:07:
97:25:15:0d:56:83:07:d0:28:ae:80:de:2f:15:7e:
69:34:b4:ab:3a:21:e4:a3:f9:d6:92:67:7f:14:23:
ba:58:9f:ef:cd:19:13:b9:d5:4a:b7:65:f0:c6:66:
91:56:dc:1f:80:ac:e6:8c:ee:9b:6b:ee:c5:3c:3d:
54:68:b6:5f:df:ee:20:0a:e8:3c:a0:02:8a:d4:7b:
c8:e9:69:c9:4b:52:2c:fb:d7:35:9b:db:c9:ee:1e:
81:fb:18:09:67:97:bd:8a:5c:f5:46:6e:c0:75:7b:
85:fa:74:89:b7:20:50:e8:38:da:22:b6:8c:2a:5c:
35:4f:31:67:26:47:d2:f6:0a:6b:91:63:6d:a2:ac:
d0:fe:32:a8:f1:03:83:cc:83:a3:f1:fd:99:86:e6:
65:b9:4c:ef:23:0d:fc:d8:d0:a8:d0:49:a9:67:ed:
cf:d0:44:11:86:4d:77:51:3d:31:c3:71:d4:5b:72:
33:e0:a3:7c:98:89:ff:91:c3:f9:98:19:ca:8b:2f:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:A8:91:A7:96:66:22:EB:1D:BD:6C:B5:C4:C7:96:94:72:C4:E0
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:be:fc:51:df:51:94:2e:d8:b6:16:f9:67:eb:5f:dc:06:fb:
c3:a5:33:79:a8:64:14:5a:95:2d:40:11:30:ce:df:eb:3e:75:
55:cb:57:80:b5:3f:05:1a:51:e8:ec:dd:07:46:29:15:24:f3:
84:42:7b:7a:41:bf:d1:8f:a0:97:32:8b:26:f9:21:5c:3d:15:
a9:59:ee:b6:b2:3e:8c:ea:ce:c7:41:4e:4a:72:fd:69:58:0e:
7d:75:b3:77:4a:1a:89:32:4a:56:0d:77:7a:f8:25:d1:45:f4:
cb:0e:a0:22:12:36:10:a9:16:e6:56:0f:50:e5:70:16:03:fe:
cb:60:da:41:a8:86:9a:da:08:ce:9a:91:d7:ba:c0:3e:2d:0d:
bd:2c:f7:77:fa:34:d4:0a:d8:b2:6e:c6:e2:1f:d0:ed:4b:1b:
5f:56:ef:41:24:4c:84:96:18:54:28:be:4c:b3:31:90:86:e3:
07:3c:b9:4d:0a:5d:dc:f8:e5:51:76:65:be:09:b3:0c:a0:02:
05:68:eb:fc:36:10:4f:ff:4b:c5:68:5f:a7:8b:16:ad:8f:39:
ee:ed:0f:66:60:6b:49:41:d5:30:d5:2e:e1:c5:82:2f:78:68:
9b:04:f5:c1:05:bc:60:67:36:e3:56:70:16:2a:70:e5:e2:83:
08:99:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:26 2025 by rpki-client