Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier: jeCfpWaV57X1cxjv864BMJ4AGIps0BaxCTzTq0uNJ3M=
Subject key identifier: 7B:66:7F:6D:5D:67:CA:8C:62:13:B6:A5:9D:80:B9:89:35:2E:9C:43
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer: /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial: 0194BBCF07263C0A9E99A3A9E7E30035E59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number: 1328
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: uDkl8KiGQHUnwMzKnTrxZtlRThcqe5gJ1yXKCdTdJP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:07:26:3c:0a:9e:99:a3:a9:e7:e3:00:35:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=7b667f6d5d67ca8c6213b6a59d80b989352e9c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:98:27:33:d7:70:77:d1:7a:32:3a:25:1a:
db:3c:ef:44:bd:1b:93:e4:2f:39:ee:dd:be:27:e6:
b2:00:22:f7:b2:67:ce:25:ed:ae:fd:2c:e1:92:31:
67:86:d7:24:a6:c0:c1:16:5b:87:66:fc:29:de:ba:
3d:15:f8:a1:ff:5e:e3:7e:5d:7c:b4:00:a4:88:7c:
05:69:c8:57:1d:6e:71:b6:aa:1d:9c:0e:46:24:d5:
01:24:c5:2c:63:f9:e0:02:8c:8a:87:13:71:bd:15:
1e:9c:25:7d:55:76:5d:e8:8e:0c:a2:49:a2:cf:61:
77:47:6c:77:96:23:7d:e1:f6:7f:b8:fa:7d:7c:16:
af:a6:d5:01:86:ee:c3:90:fa:40:1c:b6:56:e3:f7:
f9:e2:0e:4c:fa:fa:98:83:2f:89:2d:e3:3a:a0:6c:
33:d2:9b:64:ec:1f:94:ee:25:d5:c9:2e:ad:a2:e9:
2f:b0:ad:2d:f3:93:3d:48:d2:c9:99:f1:df:ab:d2:
3d:71:54:d2:83:a3:e8:d5:1a:31:7f:39:78:4f:64:
09:e7:59:65:f9:ea:17:ed:a8:9e:df:03:1a:0e:cb:
12:25:66:76:2a:8a:80:e9:4f:26:4e:34:67:5c:0f:
20:6f:59:0e:7f:c9:b3:3b:42:03:cd:63:bc:2e:ee:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:7F:6D:5D:67:CA:8C:62:13:B6:A5:9D:80:B9:89:35:2E:9C:43
X509v3 Authority Key Identifier:
keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:e4:93:b9:3a:6b:b1:e0:3d:93:3b:c2:45:67:fa:0a:39:
5a:46:fd:c1:52:be:32:33:52:b5:a0:0b:ca:1e:a8:61:a3:08:
d2:b0:ec:6e:2d:f8:ad:d1:21:6d:d7:5e:80:e7:ea:1b:ca:18:
69:8a:df:31:7f:92:4b:ec:03:43:16:1b:d2:ca:8c:e2:f0:1f:
ab:e7:3b:6f:f5:c3:40:d3:28:ca:53:db:c5:5a:52:2a:c3:ce:
16:ca:7f:97:64:e7:d4:88:06:56:6c:66:22:d1:b1:ae:a3:d2:
82:08:6c:46:2e:4e:af:e7:8e:0a:d8:52:c4:52:34:c9:79:a7:
61:00:82:07:3f:a5:01:74:aa:8e:fb:1e:72:5d:80:f2:1b:78:
db:47:e0:8d:f4:b6:d2:f8:c1:af:3b:fc:e9:d4:0f:fe:88:8e:
fc:f1:fc:3c:c7:89:14:98:5d:dd:d7:e0:c8:11:27:5b:9a:a2:
87:9f:ab:d5:37:2f:0a:c1:74:e4:0b:dc:ff:5f:ae:cf:06:c8:
d3:cb:72:67:38:f6:bc:8f:44:59:f7:54:a2:0a:11:dd:93:e5:
4f:06:a3:74:3b:aa:13:c9:18:83:f2:4b:e8:99:d8:18:d5:45:
1b:a6:d0:df:45:95:61:e1:d7:f9:26:13:c9:95:be:10:56:60:
9e:e9:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:28 2025 by rpki-client