Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.mft
File: aivBN2etLSFAYsnPzyCYF9HhYd0.mft (raw, json)
Hash identifier: K70QnyAQHwC/WI+IUvOamDe6qo0b7RquEl8tw1aJgMs=
Subject key identifier: F2:55:9D:86:B6:AE:F2:E5:D6:FF:F2:01:16:BE:1B:A6:FA:5A:1F:4A
Authority key identifier: 6A:2B:C1:37:67:AD:2D:21:40:62:C9:CF:CF:20:98:17:D1:E1:61:DD
Certificate issuer: /CN=6a2bc13767ad2d214062c9cfcf209817d1e161dd
Certificate serial: 01932F7B34016A8ADC40700C19C16FF7F1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aivBN2etLSFAYsnPzyCYF9HhYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.mft
Manifest number: 02E0
Signing time: Fri 15 Nov 2024 11:00:23 +0000
Manifest this update: Fri 15 Nov 2024 11:00:23 +0000
Manifest next update: Sat 16 Nov 2024 11:00:23 +0000
Files and hashes: 1: aivBN2etLSFAYsnPzyCYF9HhYd0.crl (hash: LZ9/cjm0pqrEcKVZlZNPrzhvXDFPVVNeEMH6S9O4XX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:7b:34:01:6a:8a:dc:40:70:0c:19:c1:6f:f7:f1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a2bc13767ad2d214062c9cfcf209817d1e161dd
Validity
Not Before: Nov 15 11:00:23 2024 GMT
Not After : Nov 16 11:00:23 2024 GMT
Subject: CN=f2559d86b6aef2e5d6fff20116be1ba6fa5a1f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:9a:c2:1f:fa:0a:37:20:3f:2c:a6:b6:94:
7d:fe:98:61:bf:0b:14:dd:a6:74:88:a2:56:03:af:
d2:f1:a3:02:5b:03:99:f0:fa:ae:6e:bb:50:c9:69:
7b:d2:33:c5:55:47:55:6a:40:b9:b3:e2:5a:0b:11:
98:7d:ca:35:17:e2:8d:24:61:26:6e:37:69:a9:35:
df:cf:33:76:0d:9a:3a:44:93:5a:15:75:b6:23:6d:
84:f9:06:a9:43:37:ac:f0:a0:c7:1e:48:3b:10:d6:
f1:e0:a1:12:37:40:07:34:8e:d1:85:f6:62:80:72:
8b:1d:4b:ac:05:62:df:7e:9d:7a:8d:e1:98:21:b4:
17:3a:5c:ca:17:83:0e:05:53:4e:24:6b:06:8d:e4:
67:88:2a:7c:4c:3f:f5:b0:17:e9:5b:ef:dd:d2:08:
76:a6:0d:e7:8e:e4:9f:ca:ef:d9:e6:8f:a3:a7:f6:
ad:03:27:ff:76:10:67:24:5a:a8:21:49:44:75:81:
ec:52:7c:c5:8a:1f:35:c9:22:5c:d9:99:b1:6f:64:
ce:4b:36:38:46:fe:ae:5c:ff:40:84:a0:3b:da:1b:
ef:e3:2c:70:ea:57:be:b2:df:94:2b:94:87:3d:09:
6a:74:85:a7:11:a7:38:8b:f9:fa:99:cc:7e:d6:f1:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:55:9D:86:B6:AE:F2:E5:D6:FF:F2:01:16:BE:1B:A6:FA:5A:1F:4A
X509v3 Authority Key Identifier:
keyid:6A:2B:C1:37:67:AD:2D:21:40:62:C9:CF:CF:20:98:17:D1:E1:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aivBN2etLSFAYsnPzyCYF9HhYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ee03ca-197e-4d1a-a3dc-86e342a85f9b/1/aivBN2etLSFAYsnPzyCYF9HhYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:39:af:f0:a6:87:3b:cc:91:fc:db:be:0d:85:a8:f8:54:29:
77:86:7f:17:90:71:76:b5:3e:e4:3a:8b:4b:ab:0e:60:61:e9:
4e:c0:7e:0c:65:87:ac:82:51:d0:40:63:00:28:f5:67:d2:3b:
89:10:2d:94:9d:8c:19:0c:b2:9f:e0:db:9d:a6:7c:b8:a1:61:
29:76:c6:a9:2c:f3:24:39:44:a9:4e:32:c7:b2:4a:b3:d0:a3:
65:09:92:de:71:76:3c:99:a2:4b:f9:ef:dc:05:64:e3:40:19:
7e:d6:e2:56:53:2f:2e:2d:33:10:46:7c:f5:59:55:2d:5b:5d:
aa:0b:f2:2c:bd:25:2c:3d:02:7b:be:ab:f5:8a:52:03:17:e2:
90:06:aa:c4:3c:f7:1b:c8:58:a6:1d:cb:eb:49:01:d7:9c:52:
08:7f:b9:a4:91:84:76:f8:c7:f6:81:3e:bb:d1:52:2d:ca:4e:
39:0c:be:fe:b2:3f:97:94:1a:5c:a6:de:aa:6d:1e:70:32:db:
3d:62:c2:14:a6:69:5f:9d:0d:94:78:ce:79:8b:f8:49:b5:32:
d7:75:fa:fb:0d:c7:1a:e5:37:d1:0d:8d:ad:28:fa:34:37:84:
59:b4:80:30:d8:fb:d2:7b:b7:84:e9:db:2f:1e:f0:38:aa:b7:
8d:27:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:25 2024 by rpki-client on console-ams.rpki-client.org