Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: yOPiT1RrpjhDmP/bUa4kcqwKsRmrexgKeFy9nOANoMg=
Subject key identifier: BB:6C:86:39:90:3D:2E:6E:45:19:9B:E8:D0:63:63:27:99:0F:08:7E
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 0195E0B43AE9F0556933C106ACA783208BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 0F6D
Signing time: Sat 29 Mar 2025 07:01:02 +0000
Manifest this update: Sat 29 Mar 2025 07:01:02 +0000
Manifest next update: Sun 30 Mar 2025 07:01:02 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: d0Zm2dND44b+ki0Qy5IfiG8fDO7wfdBnjRU0EqFKRkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:3a:e9:f0:55:69:33:c1:06:ac:a7:83:20:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Mar 29 07:01:02 2025 GMT
Not After : Mar 30 07:01:02 2025 GMT
Subject: CN=bb6c8639903d2e6e45199be8d0636327990f087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:1e:7d:99:4d:b6:ee:07:42:06:4d:98:62:
88:df:3c:3f:9e:90:d6:eb:4b:cf:17:94:ad:6f:15:
a4:99:df:de:2e:f4:59:4a:9c:2a:57:70:22:a2:ad:
c7:70:43:fc:28:1c:74:0a:59:41:f9:44:62:59:de:
31:51:d7:c1:83:2e:3f:b9:af:81:33:e0:f1:13:46:
9f:9f:97:02:37:23:51:05:07:24:68:1e:0b:c0:2a:
2d:82:90:d2:94:a5:0d:1e:6d:16:a9:9a:c1:80:53:
71:3e:04:0a:42:9c:a4:bc:7b:b2:15:4c:ea:45:12:
f8:25:b6:50:95:74:fe:f3:ae:21:b1:e5:00:b7:a7:
e1:31:de:bf:1e:a8:41:1e:71:97:00:26:91:e4:77:
ba:51:86:06:6a:53:96:24:24:53:8c:2e:b9:19:a9:
a0:c6:28:ff:60:69:51:0c:28:94:58:e8:51:52:24:
3b:79:9f:24:9e:fe:af:22:31:ce:56:ee:f4:13:5b:
0b:6d:1e:89:de:64:56:68:a5:fe:69:74:7b:95:f9:
6a:f8:26:21:98:c5:0d:d7:5d:36:28:d0:09:a0:8c:
25:5d:e0:43:28:93:a8:99:2a:28:bf:6a:2f:fc:84:
59:62:57:61:b7:71:dc:ac:de:d2:3b:5f:f2:55:3f:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:86:39:90:3D:2E:6E:45:19:9B:E8:D0:63:63:27:99:0F:08:7E
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:70:5f:b9:58:63:c2:0b:fa:30:8a:ca:ed:58:d3:95:e9:
d8:d2:05:23:f5:56:a5:50:7b:82:cc:95:08:cb:8f:f1:71:e9:
93:3f:a2:7f:d0:a7:f8:80:6c:83:60:e9:3c:d8:87:8c:dd:a6:
70:fb:75:bc:7b:b3:77:39:98:b5:de:48:0d:a9:82:1b:4f:3f:
02:37:17:eb:89:9f:3f:1c:be:92:dc:9f:9a:d6:8a:8e:88:6e:
42:12:89:f6:33:f0:e0:b9:0b:d1:be:be:c4:36:5a:b9:cf:4e:
46:4f:90:de:b2:45:9e:c3:ae:b8:de:ad:0f:5d:d5:f4:d2:38:
12:62:ee:0b:48:ee:ed:18:d4:90:36:c2:e2:00:f1:64:38:eb:
58:00:9d:e1:e4:df:f9:92:0e:3e:03:dc:5c:f3:62:a9:3f:b7:
e9:5d:b6:ca:b9:c4:7b:8d:40:61:31:3f:87:1c:03:94:af:44:
7b:30:e5:66:04:f8:8f:37:3e:02:2f:0e:c4:d0:9d:a6:2f:b8:
a5:78:13:52:f4:54:3c:e2:73:cd:2c:31:89:a6:1b:d7:2e:a0:
37:e0:28:7f:71:5f:d7:cf:83:a9:8e:cb:ed:65:f3:a0:ec:94:
e7:95:4a:c2:2c:03:91:9f:33:75:5f:41:38:66:e3:63:09:fa:
a8:30:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:30:17 2025 by rpki-client