Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: PsiERAJ/ouCg/J8HT2icLcaik6up/1ZZrMGEno1esz8=
Subject key identifier: 50:49:DF:8B:5C:99:7B:6E:35:D5:43:0A:8A:0A:25:10:C8:E7:61:5E
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 0194BCA9B13A575C791767EB4EA5387C91CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 09C6
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: u78clL3QDMxr9X9BILUbpxHB32XAod5lPZ1V9ejuErg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b1:3a:57:5c:79:17:67:eb:4e:a5:38:7c:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=5049df8b5c997b6e35d5430a8a0a2510c8e7615e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:94:c1:f5:b4:bd:27:a7:c6:0f:b5:73:65:
04:98:ca:94:75:4e:43:6c:8f:80:4b:ae:82:28:14:
c4:25:5b:a6:f7:61:05:3a:88:73:37:3f:be:1a:70:
73:02:28:81:2d:91:11:37:dc:68:ed:ed:5e:42:b1:
9c:8f:51:89:09:bc:91:49:a0:32:a5:c2:14:25:8f:
f7:16:09:80:da:fd:f1:6e:fb:c6:1c:92:8b:f7:ea:
05:36:35:2d:6e:fb:80:d3:26:29:fe:e9:9c:29:bf:
4a:d0:92:fd:81:a7:04:bb:82:c0:26:f9:79:79:60:
cc:1f:d2:9a:d0:0d:51:bb:c1:7b:dd:84:b9:3d:30:
f7:cd:ff:cc:60:f7:f7:ac:6c:bf:10:5a:74:4e:70:
0a:33:99:20:e6:12:72:e7:dc:8d:52:ca:ab:de:79:
b3:67:75:5b:c5:89:80:00:3a:64:c1:a6:7c:e2:24:
cd:f8:94:98:c9:ac:73:bb:6c:71:79:d1:67:05:0b:
72:6d:b4:dd:76:5a:20:8f:9d:89:be:8f:1f:4f:04:
40:19:46:c0:44:32:ae:06:73:b6:03:e4:09:bd:d5:
2d:f4:57:06:dc:4b:3d:e8:be:2f:69:fa:cd:0c:52:
cc:47:11:8a:85:3c:ce:ae:85:63:74:73:cc:b7:f5:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:DF:8B:5C:99:7B:6E:35:D5:43:0A:8A:0A:25:10:C8:E7:61:5E
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:ed:3c:26:23:03:10:e5:15:69:ce:e7:61:60:23:b8:76:
27:2a:61:d5:f4:18:36:55:8f:30:54:b8:c8:e2:d0:4e:31:d9:
84:f2:0e:15:ab:eb:a6:9a:9f:3a:80:f2:4a:e5:e5:65:64:4d:
a4:6a:4c:bc:cc:42:6e:41:b6:90:39:5e:c6:eb:fb:75:60:20:
38:e2:10:a8:b7:83:8e:3b:79:89:67:28:76:76:c7:04:b3:9c:
93:02:30:27:99:52:e2:0b:37:34:8f:34:3a:af:9d:19:6e:4c:
43:18:e3:d7:b4:d9:30:de:13:96:7c:bf:fd:39:ea:fa:8b:e9:
8f:f9:0d:72:7a:14:23:e0:ee:30:58:e7:46:3c:6b:1d:ff:8e:
ac:c2:d0:de:b9:e0:d4:bf:50:cd:3a:e4:0c:5c:38:75:cc:bb:
5f:28:fb:5f:b4:5e:7c:df:86:57:51:d1:66:6e:e9:26:10:08:
47:6e:52:f3:a2:58:79:bf:42:06:c4:19:de:c8:d1:fa:7c:76:
f1:c8:0a:19:fb:51:b8:44:36:61:7f:40:64:55:5c:f5:3f:68:
49:9c:06:8f:37:96:63:c4:54:1b:d4:15:b6:8c:27:93:64:c9:
71:8a:85:8e:42:a2:a3:8f:20:c3:b2:d2:da:ea:2a:d8:eb:a2:
3e:79:c4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:36 2025 by rpki-client