Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File: aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier: psVkbeZqY1WOZnPAf+guObXVirhIM50iGgiGo6eqAmY=
Subject key identifier: F5:1C:1F:A5:04:02:E5:C3:72:CA:1F:35:1A:EF:9E:EC:0A:CD:DD:E0
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer: /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial: 0194BD178DEC4428A4454423B50137CE2E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: WEie7HidvN56cZk+uTEjCS2Dkl+qmwJbc9S4uDhKuNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:ec:44:28:a4:45:44:23:b5:01:37:ce:2e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=f51c1fa50402e5c372ca1f351aef9eec0acddde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:b7:45:e5:39:af:2a:fb:cc:a5:5a:17:72:
6f:88:9f:f6:89:db:50:61:4d:28:b5:68:a4:f7:e0:
09:62:52:46:70:0b:d8:d6:6d:b0:67:14:c2:ee:72:
95:f9:9a:59:46:84:74:cd:d0:c0:cc:e0:68:14:18:
5b:6a:0f:2f:ac:94:0b:80:2d:f9:00:c7:b8:cc:06:
b3:99:3e:f3:53:07:7c:2c:f2:a9:92:6e:58:45:6e:
07:c3:9a:1e:8a:61:18:18:b9:c1:b1:b8:b9:cb:b8:
4d:11:06:fa:e3:d3:61:9b:ec:00:54:0b:e3:6e:2a:
a2:14:2f:23:0c:54:61:7c:51:59:8e:5f:06:79:d7:
ff:0e:bb:b0:f2:ee:4c:00:92:4d:52:43:11:54:cb:
2f:e5:c2:98:fd:82:59:95:ae:cf:1a:af:2d:24:a5:
52:90:0d:99:38:06:e4:64:ef:a5:8c:e8:83:a4:b0:
0f:b0:e1:61:72:c8:d4:ab:ec:b9:ca:50:1b:6d:2b:
bd:25:0f:4a:b0:4f:a3:e7:db:e8:d0:08:a5:96:ea:
20:03:99:fe:22:d5:e4:f6:86:ff:ef:0f:ff:f6:83:
08:0b:1c:c2:ff:a8:7d:cc:61:16:60:63:3c:bd:5e:
72:c5:3d:70:70:cf:b6:4d:32:2a:d6:23:53:62:95:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:1F:A5:04:02:E5:C3:72:CA:1F:35:1A:EF:9E:EC:0A:CD:DD:E0
X509v3 Authority Key Identifier:
keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c1:85:4d:22:6c:27:59:1a:08:70:ee:84:6c:39:3d:71:3d:
06:38:9b:c0:d7:e0:1d:04:f6:f4:5b:79:ab:97:71:e9:9f:d7:
45:5c:9e:70:06:29:11:76:2e:44:d2:be:7b:ec:af:4c:f2:6a:
fd:b2:fd:fd:9e:2d:1d:6b:7a:a6:28:f7:0b:23:64:d4:9e:d2:
72:83:2c:8d:07:21:59:39:bc:c4:d4:8c:5c:3c:99:12:94:eb:
d0:91:f6:cf:d4:6e:64:fb:c0:99:04:59:26:e3:d3:a8:79:4b:
02:9f:e6:f6:bc:a1:f4:16:5c:ca:c0:5c:80:f5:bb:d5:6a:28:
18:87:01:ee:32:52:65:0a:fe:58:bc:b2:37:5a:99:f7:0d:6c:
42:e9:a9:a8:43:44:81:6c:0b:1d:de:8f:3d:73:b4:e8:9d:98:
64:25:bb:52:f6:8c:5a:5f:ef:a2:aa:98:c8:bb:e1:9c:3b:62:
8b:2d:5d:71:8c:17:f2:df:c3:31:3e:a7:9a:0e:8a:e8:d5:7b:
2f:09:44:d3:50:fe:77:bb:0f:c3:02:a0:ba:ab:77:6b:69:83:
73:a5:b5:65:5d:8e:cc:6b:2a:7b:bb:9c:6e:dd:c2:a6:e9:75:
4a:7e:38:90:af:1a:e0:7b:c7:8f:f1:b6:6a:ae:2b:cf:54:6a:
1d:65:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:07 2025 by rpki-client