Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier: W4XrYJQYA0maadttcGh6y+DOarlD54LRjbvv2gSYj3U=
Subject key identifier: 38:3F:89:F7:0E:EC:A2:17:03:B2:58:F0:20:C8:5D:D8:4A:1E:C1:1E
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial: 0194BD177E215E77514775976BD0BCD79099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: 2CbGZ7OZrzIq6Oi631MFlgTaDJkbBfgNzoHb5mgrefA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7e:21:5e:77:51:47:75:97:6b:d0:bc:d7:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=383f89f70eeca21703b258f020c85dd84a1ec11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:90:2c:cc:ff:96:9b:c2:69:28:5f:0d:31:
cc:d8:97:df:2b:a4:83:af:68:70:ed:d6:f1:70:d0:
dc:4c:6e:9d:6a:89:c9:9b:97:20:a1:d7:d2:89:62:
58:e0:d6:fd:6e:26:27:ba:bf:74:c3:94:59:ea:d5:
9d:8f:16:32:68:93:71:e7:57:c2:51:b4:41:ea:8c:
dc:30:b3:3b:ca:ce:6c:0b:b8:49:6c:3d:e3:21:c4:
41:4b:15:fa:37:f2:bb:10:58:71:b1:70:92:66:ac:
a3:12:33:6a:b6:46:7c:0a:99:36:bb:21:6c:20:a2:
26:af:c8:79:0a:ea:f4:d1:e7:4c:94:51:52:1f:81:
52:2e:0a:66:8b:19:95:08:65:a0:c5:0b:03:41:8d:
5d:61:de:cf:eb:6b:eb:28:f0:c2:5a:d3:e3:db:65:
c0:67:25:9c:cb:ba:51:63:b3:8d:f5:0d:26:d3:dc:
2e:6d:45:2e:b2:1b:64:dc:0f:6d:de:76:a1:e6:d0:
17:11:a2:4f:a1:57:2a:ef:f4:94:f6:ab:09:6e:b8:
ce:e6:60:28:c5:8d:aa:a0:4c:f9:f9:e7:cc:fc:06:
15:df:82:fe:f8:70:77:67:3d:ad:f7:a8:cd:04:f2:
67:9f:e7:e0:1a:43:fd:44:92:c3:be:c7:f8:63:8a:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:89:F7:0E:EC:A2:17:03:B2:58:F0:20:C8:5D:D8:4A:1E:C1:1E
X509v3 Authority Key Identifier:
keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:f6:9d:0c:c0:98:a5:0b:dd:40:fb:2d:15:86:7b:3c:78:
ec:32:af:fd:91:60:49:83:06:bd:64:69:f4:7f:77:b7:90:7e:
90:11:08:ee:83:9d:fa:55:23:bb:c8:47:a5:65:ce:7f:a7:7c:
4a:24:6f:1d:68:97:a3:09:13:0e:3d:58:5b:a5:15:48:d1:f5:
8a:c0:f9:32:0f:14:0f:15:f2:0e:7e:d2:91:8a:87:52:22:e0:
4f:9d:4a:d1:52:e0:37:41:c9:3c:90:e4:0e:eb:8a:0b:dc:d6:
47:4f:34:b4:33:7f:f1:e2:05:13:d1:a1:9a:c8:c1:2f:c9:fc:
c8:eb:16:83:c7:07:db:54:e1:02:08:b6:18:63:70:5b:fc:cb:
a0:f9:26:86:84:58:a6:28:61:53:76:2f:43:aa:5e:0e:68:f8:
fe:d6:14:41:46:e1:ad:6b:77:d0:9d:fb:8c:12:76:7a:dc:cf:
f5:6c:7c:08:d4:7d:fd:57:7b:0f:27:93:d9:ad:2c:41:12:a6:
af:ca:aa:7c:d7:5f:9e:bd:8e:ab:62:db:79:6a:8c:9f:b7:27:
28:38:6c:8d:36:f8:95:0f:aa:f9:aa:94:fc:c0:2f:44:91:9c:
99:d9:4f:c3:9e:d1:e0:4d:2a:35:0f:65:92:5e:da:fb:d2:5f:
04:32:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:27 2025 by rpki-client