Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: SwMghm1fi1krv6E+sDmLDOzLtS6CvE3VGSgtebxvMD8=
Subject key identifier: BA:06:EE:70:34:89:F2:2C:99:79:0F:63:F5:04:C5:64:1D:E9:F7:6A
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 0194BBCEED2C7C8F9C191EF6116A66B240A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 07CB
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: t8XKPZkecd2vY18bbVNS6/596Zg6hSXKlBJ58Z5gUxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:2c:7c:8f:9c:19:1e:f6:11:6a:66:b2:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=ba06ee703489f22c99790f63f504c5641de9f76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:64:1b:2d:f9:34:1c:0f:04:62:22:3b:b1:
db:70:8f:a0:d4:14:b3:4e:da:83:b3:17:3d:0e:a5:
f4:1e:af:d1:1d:d0:24:a7:6e:db:17:89:99:22:b9:
97:d6:45:d2:22:f2:e8:d4:be:02:dc:fd:4a:3d:66:
fb:64:28:42:de:1b:e1:ae:58:1a:00:f0:37:a7:6c:
d0:4e:aa:80:60:e3:96:d5:c1:22:e1:33:c8:a3:a5:
45:4c:b5:0a:9f:1f:30:3e:9f:de:8d:7c:39:c0:94:
95:e6:8a:de:e8:a8:38:15:80:ae:ef:ad:63:90:74:
58:d2:35:2f:31:ae:4b:7c:b2:a0:18:f7:25:73:43:
e3:a8:dc:b7:d7:cc:13:47:39:b3:f8:2d:c1:41:4f:
a3:0e:43:1f:e2:67:7c:2c:e2:e2:43:a1:df:e1:a0:
69:5c:24:bd:ea:5c:16:03:df:0f:40:b6:6e:70:56:
4c:1a:62:41:c5:52:97:ed:de:53:55:5f:7e:b0:98:
4b:da:1f:01:f3:5e:d2:75:4c:2a:90:df:01:cb:d8:
7f:66:43:18:4e:20:fe:16:bd:b8:7f:e0:45:69:7e:
ca:63:28:60:94:0a:ac:f8:5f:be:0a:15:ea:e5:6a:
72:93:a3:6a:cc:be:48:23:69:9b:9a:1b:fd:ad:4f:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:EE:70:34:89:F2:2C:99:79:0F:63:F5:04:C5:64:1D:E9:F7:6A
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:b0:de:46:85:44:1d:b2:da:ef:ef:b1:16:f0:bc:03:8a:
f0:45:12:40:50:b8:eb:80:16:97:a4:e3:00:66:81:79:c4:90:
50:27:a5:b4:2d:ca:6c:cd:aa:14:4b:24:ba:44:25:6f:2f:86:
8a:6a:f6:1f:a2:26:a4:81:cf:f1:a8:96:23:49:30:37:ff:71:
ae:40:43:60:98:7e:47:4c:c9:49:76:8b:df:1d:62:b0:11:f6:
32:92:4d:15:08:2d:0d:09:0d:ab:5f:7d:8e:5d:e4:6c:8c:1a:
db:70:d7:fe:62:34:0d:f7:38:04:ea:5b:ef:cb:ef:d2:f6:93:
81:fb:81:96:6b:fe:d3:a8:97:a4:07:90:ff:39:9c:34:ac:c7:
a0:b9:82:bf:ea:1a:dd:f5:11:5e:01:f4:b7:18:d9:09:32:b1:
41:38:a5:5b:01:ac:d0:4a:f6:42:f7:4b:af:5e:49:1f:3c:a0:
17:c4:93:fa:f6:6c:9d:81:4c:3d:27:e3:45:03:e4:37:92:44:
7c:98:bb:ff:5e:2f:a9:3b:41:af:38:64:02:d3:71:5a:7a:b9:
f1:70:38:99:8f:ca:c2:6c:96:c9:f1:84:71:60:2c:88:7d:d4:
6a:8f:de:89:27:91:ca:0b:36:9b:f9:9d:03:20:2f:f9:3e:e1:
07:ea:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client