Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.mft
File: ACZ5HSXg8epGVUcip6woObX3uEc.mft (raw, json)
Hash identifier: jL51QNlbli74aYxe4/vVpOLBTx4zFO0ZWhcL08X2tTs=
Subject key identifier: A7:07:08:34:07:FA:0C:59:ED:20:A3:9F:BC:70:45:28:58:D4:D3:B3
Authority key identifier: 00:26:79:1D:25:E0:F1:EA:46:55:47:22:A7:AC:28:39:B5:F7:B8:47
Certificate issuer: /CN=0026791d25e0f1ea46554722a7ac2839b5f7b847
Certificate serial: 018AEFD5D119A6DA9A3562C973E7423F0C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZ5HSXg8epGVUcip6woObX3uEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.mft
Manifest number: 0A6C
Signing time: Mon 02 Oct 2023 10:01:21 +0000
Manifest this update: Mon 02 Oct 2023 10:01:21 +0000
Manifest next update: Tue 03 Oct 2023 10:01:21 +0000
Files and hashes: 1: ACZ5HSXg8epGVUcip6woObX3uEc.crl (hash: Pv3Sv6O677uctA/WmvX459FNpWp/woX1Hwukj7L+8Fc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:d5:d1:19:a6:da:9a:35:62:c9:73:e7:42:3f:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0026791d25e0f1ea46554722a7ac2839b5f7b847
Validity
Not Before: Oct 2 10:01:21 2023 GMT
Not After : Oct 3 10:01:21 2023 GMT
Subject: CN=a707083407fa0c59ed20a39fbc70452858d4d3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:54:a5:05:e7:3a:51:40:67:87:3e:77:db:51:
54:5c:bf:ee:7b:da:c6:4e:77:b7:08:2a:d7:72:38:
49:e0:56:94:b2:c2:81:ff:72:16:ad:4f:23:e1:05:
cd:59:80:12:e6:0c:09:2a:ca:c1:dd:61:64:70:9d:
22:e8:68:1b:70:b0:82:ee:5f:25:28:36:b9:9b:fd:
a0:7b:8d:4f:5a:b8:ec:63:ea:b3:12:64:4c:78:73:
11:42:39:b3:bb:36:b2:84:1a:40:67:0e:ea:41:cb:
1c:05:6f:dc:da:30:58:19:5a:c0:32:7f:72:de:b7:
cc:b1:c3:ea:03:0b:d0:20:49:22:70:c1:0d:aa:60:
b9:d5:ef:56:5b:9a:3f:86:aa:7d:9b:de:e9:57:60:
c8:a6:9d:2d:5a:b4:bd:5a:12:01:06:c4:d4:ab:df:
6f:3e:a9:fd:18:f2:19:74:22:74:8a:e0:14:e9:1f:
68:bb:8f:c5:85:cc:51:41:f5:e9:e2:57:62:4f:ef:
dc:6e:af:52:6e:a7:5e:65:3d:39:74:88:5f:b7:b5:
d4:25:fe:5e:48:a4:fa:9d:5c:a0:bf:ee:c7:ba:18:
44:ca:8a:65:9a:f2:e0:84:af:28:6d:64:ce:f0:84:
88:8b:d8:e5:f5:4b:1b:0f:db:17:44:85:ba:6c:b0:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:08:34:07:FA:0C:59:ED:20:A3:9F:BC:70:45:28:58:D4:D3:B3
X509v3 Authority Key Identifier:
keyid:00:26:79:1D:25:E0:F1:EA:46:55:47:22:A7:AC:28:39:B5:F7:B8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZ5HSXg8epGVUcip6woObX3uEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6b70c4-1ecf-4a5e-a67d-85ad24376691/1/ACZ5HSXg8epGVUcip6woObX3uEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:22:ce:d6:54:82:89:28:96:b0:ff:a2:69:a5:fe:f3:21:
26:b7:e2:41:5a:5e:ec:6a:19:4e:22:e3:08:66:c6:a2:ae:c1:
fa:ce:dd:83:b2:9e:c3:ae:d0:dc:39:5b:2b:01:3e:a9:0d:9c:
a4:e8:f7:e9:aa:be:3d:4f:e9:5a:c6:9d:f6:65:eb:4c:62:e6:
17:8d:ee:ba:a7:27:fd:05:e1:33:8c:5e:cf:1f:3d:c6:d4:c7:
25:44:81:64:07:35:0e:30:40:08:57:4c:06:37:03:39:b5:1b:
59:a9:51:78:06:db:aa:b1:97:7b:f1:a4:8a:51:59:39:81:52:
7d:12:ae:a3:3c:8e:0a:91:77:e4:1f:45:08:ec:13:79:4e:56:
b1:55:b0:be:27:c0:00:67:2f:c5:cc:97:47:78:96:ce:9d:b1:
45:7a:f8:27:c9:9a:77:64:7d:d4:23:6a:57:95:01:c0:4b:4d:
87:f5:a7:e7:ce:74:6b:bd:06:9a:0d:56:c6:1e:97:7f:2a:e4:
48:64:26:91:56:80:94:fe:7f:f6:65:80:47:03:7a:28:b6:09:
14:31:60:f7:47:7d:a7:ef:3a:9b:ed:e1:90:7f:81:9a:ce:94:
7d:5f:d0:53:a6:b1:2d:6e:2a:4f:ba:e4:9d:0a:ae:fb:79:2f:
05:2a:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:11:06 2025 by rpki-client