Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: YIJPD1UJXOsiz5yN78xz46ePJ+2xXq7l+7v6IyuQ/UI=
Subject key identifier: FD:00:30:24:6E:CF:86:48:16:70:75:BC:28:95:57:F6:7C:2B:95:DE
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 0194BC3CA4CCC00C4D945C07D792B8E1BF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 03F8
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: swoU3Wx0rd7qrjj/7qtkt5FmjksaA0ywSbY6bdo76hU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:cc:c0:0c:4d:94:5c:07:d7:92:b8:e1:bf:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=fd0030246ecf8648167075bc289557f67c2b95de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:57:75:1e:bb:c0:cf:30:6e:40:d5:fb:ca:
e8:08:16:3a:0c:64:25:19:16:eb:b9:8e:d5:f0:cd:
fc:40:78:82:4b:f7:74:35:21:aa:3b:4f:49:bb:cf:
e7:43:ba:7d:79:0d:f5:4d:93:7b:3e:0e:3d:ef:f0:
a6:8d:73:c6:56:d7:aa:1b:ca:8c:8a:07:d6:a1:5f:
df:1b:fc:6f:d3:1b:40:88:9e:15:53:7e:8d:c5:dc:
92:b8:2e:5d:5f:fb:6e:ec:0c:4c:0d:3c:8c:15:3c:
4e:ed:f4:3b:94:78:12:9e:f2:29:fa:57:b1:92:09:
6b:93:07:9d:b4:3b:3e:52:b3:72:6e:a3:f7:b7:8f:
34:f7:ee:19:73:4b:18:2e:ff:73:1e:8b:0c:e8:27:
2c:6b:55:82:9e:8f:51:5f:d0:8c:6a:18:b7:65:35:
0b:51:c1:96:59:69:87:98:97:e9:2a:00:74:0c:16:
35:ce:b8:a3:c1:f0:32:4e:5f:75:c7:85:85:07:60:
8e:c7:79:63:e1:28:f3:4a:bd:35:4c:db:c4:ec:aa:
41:00:bd:c8:a8:1e:99:8c:da:10:3d:06:73:4a:a3:
49:c6:76:50:35:f4:74:71:7c:06:fc:e2:ed:d2:cb:
3d:48:26:c5:16:bf:c3:dd:96:86:75:16:f2:6b:0b:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:30:24:6E:CF:86:48:16:70:75:BC:28:95:57:F6:7C:2B:95:DE
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:ca:16:a1:27:19:d9:47:de:4c:d7:d2:03:d5:8d:9c:6d:
7e:30:12:d7:e5:53:14:20:f6:87:cb:ea:44:f6:4b:24:13:62:
c7:f0:98:68:a9:af:f7:fc:ab:81:e8:c7:30:b4:2d:3d:51:3e:
a2:20:ba:ae:46:49:f4:f2:bc:c8:38:6f:f5:56:37:2d:ba:dd:
c2:bb:6a:e7:e3:c6:0f:34:3b:a3:11:c3:1b:68:0f:d8:5b:b7:
70:ab:fd:91:69:80:c6:ec:36:09:b6:23:17:8c:9f:29:10:98:
dd:d0:e3:a1:d6:d4:76:a4:c7:37:92:51:e4:89:32:2b:7a:d4:
91:12:dc:6a:c9:f5:b6:2c:dd:b5:ba:0f:28:83:bd:5c:a3:46:
44:6d:5f:15:7e:40:d3:16:70:28:95:69:41:e0:1a:3f:3a:8d:
63:32:17:c4:0c:22:d9:3e:df:fc:70:4d:54:25:8d:88:37:91:
34:96:84:e2:90:93:e0:0d:a1:e8:01:32:3a:bb:a5:d7:1a:07:
59:ef:f9:e2:b8:20:85:1d:a7:b8:5c:a3:67:1c:84:43:76:5d:
e2:6b:fc:16:ed:24:ad:4d:18:c6:e8:9a:a8:00:a5:83:ae:1a:
bb:d9:cf:13:c4:ce:40:7a:0e:5f:e7:72:03:43:8d:f8:a0:e4:
56:02:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:35 2025 by rpki-client