Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
File: AVkheESIrdmgVmH_EXh-x1TmBeU.mft (raw, json)
Hash identifier: EUvJTUweNUFhOBxcNX9cnFzUtJjYIRopIIqn/3w/eDI=
Subject key identifier: FB:E9:AE:B4:5D:00:30:16:A9:EC:41:94:26:4C:3A:E8:FB:A0:E5:BD
Authority key identifier: 01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
Certificate issuer: /CN=015921784488add9a05661ff11787ec754e605e5
Certificate serial: 0194BBCEB18946FB23EAD854E350397ECB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: AVkheESIrdmgVmH_EXh-x1TmBeU.crl (hash: WyotA+DSSpAea/6WTbSgGEnK0/SDquRvkxN551LXkdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b1:89:46:fb:23:ea:d8:54:e3:50:39:7e:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015921784488add9a05661ff11787ec754e605e5
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=fbe9aeb45d003016a9ec4194264c3ae8fba0e5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:48:c8:bf:7c:96:b1:55:8a:c0:5e:88:44:
58:4e:4a:a1:f4:a9:d6:26:3d:50:a2:0b:ec:0d:4b:
be:83:79:a7:b2:6c:96:f5:96:d0:9b:30:18:b6:4c:
4e:eb:99:89:18:45:b7:dd:2c:bf:3a:e3:6e:73:aa:
3d:9c:3b:6a:d0:3d:0a:8f:24:03:e8:ff:74:82:cf:
ba:2a:31:4a:d8:cc:86:ab:35:6b:3e:36:ab:d5:73:
23:e7:88:cf:92:a3:7c:18:8f:00:16:4c:9a:38:fd:
23:46:35:a1:b7:78:c0:65:5d:db:5e:04:3d:cb:19:
f7:c6:76:c9:95:c7:23:8f:2a:f7:a9:8a:c1:f7:8a:
f8:b7:0d:31:06:66:6d:6e:06:8f:73:d5:1d:08:6e:
e0:17:e7:4d:d8:04:a8:0c:1b:ea:57:c7:11:de:41:
0b:76:a3:bf:23:9e:b0:d0:9c:17:ed:98:ac:6c:6f:
80:07:ba:b1:6d:c6:ce:b9:fa:81:e2:f8:d4:81:42:
ae:c0:74:ae:b5:71:10:e6:dd:aa:f0:b3:41:f8:00:
87:5d:e4:51:48:11:2c:df:31:b9:37:6a:ec:75:95:
ab:91:19:15:d2:81:c0:8d:5a:d5:ff:c6:43:fe:5e:
7f:af:ee:c7:d2:de:c2:48:42:cf:b3:9e:8b:25:2a:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:AE:B4:5D:00:30:16:A9:EC:41:94:26:4C:3A:E8:FB:A0:E5:BD
X509v3 Authority Key Identifier:
keyid:01:59:21:78:44:88:AD:D9:A0:56:61:FF:11:78:7E:C7:54:E6:05:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVkheESIrdmgVmH_EXh-x1TmBeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/129d62-d1c8-4842-9549-8a918400f260/1/AVkheESIrdmgVmH_EXh-x1TmBeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9f:63:8b:c4:23:5d:22:97:ca:cf:c1:54:31:d5:cf:5d:2c:
b1:6e:07:74:f2:0b:9e:eb:24:0b:25:05:d4:c7:a8:02:4c:f8:
e3:84:b7:94:19:bc:72:2c:bd:b6:91:bb:a4:63:37:08:68:2f:
38:b5:52:7b:93:37:10:0f:70:59:0b:21:20:8f:35:8d:80:ad:
50:81:1f:ca:d8:8e:6b:db:88:25:95:af:ed:f0:90:39:27:68:
2c:ac:2a:2e:c6:aa:2b:e4:f5:71:f5:bc:9c:1e:7a:e9:b2:2c:
77:2a:e3:61:40:b4:53:49:03:49:d5:fe:3e:94:4a:f4:3a:76:
82:16:72:35:31:73:05:92:b7:b5:55:89:6c:a8:91:f5:26:cd:
7c:2b:b6:d9:6e:a8:95:32:e3:03:87:84:fc:d7:30:bd:d7:0a:
17:c9:4f:3b:ff:72:da:37:3e:c7:25:b9:99:4f:95:bd:81:29:
22:4b:8d:a8:18:49:93:47:24:a4:aa:bd:49:d7:2d:73:17:9a:
3d:00:0d:ae:df:ab:78:94:66:25:5b:e7:ff:8c:e4:60:51:ad:
74:fd:62:ab:62:a7:9b:6d:c3:e4:8a:d5:bf:27:0f:fa:e6:d3:
70:ca:d3:ad:28:b1:32:5c:80:d2:0d:90:4a:b1:a3:88:92:1c:
a7:9b:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:39:52 2025 by rpki-client