Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
File: AyZBcSxiGTI3x0InUVMrg5tA4H0.mft (raw, json)
Hash identifier: TMsSIgWPwsTgu+zy87PbgTXd1TmLOqQsNqaUz2iSnfY=
Subject key identifier: E9:D4:43:08:1A:1B:19:44:16:59:8B:3E:93:95:2F:06:DE:81:CF:B6
Authority key identifier: 03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
Certificate issuer: /CN=032641712c62193237c7422751532b839b40e07d
Certificate serial: 0195C6BDA6789003C843BA811D57870725EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
Manifest number: 0BEC
Signing time: Mon 24 Mar 2025 06:01:12 +0000
Manifest this update: Mon 24 Mar 2025 06:01:12 +0000
Manifest next update: Tue 25 Mar 2025 06:01:12 +0000
Files and hashes: 1: AyZBcSxiGTI3x0InUVMrg5tA4H0.crl (hash: f1y/S1G6tchrthaV3ZoidJ0hgXqkuvgbK8ONyM0tySM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c6:bd:a6:78:90:03:c8:43:ba:81:1d:57:87:07:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032641712c62193237c7422751532b839b40e07d
Validity
Not Before: Mar 24 06:01:12 2025 GMT
Not After : Mar 25 06:01:12 2025 GMT
Subject: CN=e9d443081a1b194416598b3e93952f06de81cfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:3f:d3:b9:70:92:ed:3e:bc:a2:9f:68:d8:
84:39:8f:c2:b8:83:77:93:18:87:94:41:3e:6c:c9:
c0:65:71:01:ac:34:b7:f2:7b:ee:a7:64:45:06:3d:
f9:dc:23:59:35:68:f3:0a:f3:56:22:be:a4:03:18:
e2:8a:e5:26:5f:4d:13:5f:94:5e:c2:a3:00:5f:14:
b9:2d:eb:dd:7d:95:e7:52:33:3b:d9:2c:88:f0:bc:
03:a9:44:ac:ec:7d:3b:17:35:82:e5:8a:5f:e6:f9:
37:d4:f0:8b:35:c6:aa:c4:69:66:4b:12:c2:f3:97:
72:fd:48:1c:2b:46:b8:43:0c:7f:d9:47:1c:35:6d:
cf:a5:02:a2:3f:c6:e6:b4:d2:4f:70:40:63:92:42:
3f:f2:82:69:ba:34:24:6e:a2:ff:a8:06:fe:fa:5b:
1f:6f:ed:ba:9e:9b:ef:2e:60:a0:0b:1c:44:2d:71:
bf:e8:4e:7c:44:31:1a:00:13:0c:2f:ea:11:e2:60:
c0:0f:60:53:01:c4:eb:ec:0b:91:33:3a:8d:de:5e:
60:7f:04:01:e0:59:9e:93:03:47:84:89:02:12:87:
33:ba:e1:86:ac:2c:9b:57:b7:78:d2:10:e5:ee:31:
ef:38:c8:fa:70:89:2e:c1:36:8e:84:53:4d:56:6b:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D4:43:08:1A:1B:19:44:16:59:8B:3E:93:95:2F:06:DE:81:CF:B6
X509v3 Authority Key Identifier:
keyid:03:26:41:71:2C:62:19:32:37:C7:42:27:51:53:2B:83:9B:40:E0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyZBcSxiGTI3x0InUVMrg5tA4H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2d1bf1-7992-4ee3-b2b1-e50dd362875b/1/AyZBcSxiGTI3x0InUVMrg5tA4H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:21:1f:c0:76:56:ab:cd:66:ba:ae:9f:e5:37:a6:a4:d3:e3:
53:c4:93:69:5c:ee:f9:f3:f0:64:03:84:49:3e:80:bd:a7:33:
65:88:24:b1:a5:74:c6:5b:4e:ac:02:b6:15:62:b4:cd:86:f1:
b2:38:9b:43:78:f8:3f:0a:47:98:4c:b2:16:78:5d:fa:5f:e8:
6d:4a:00:63:b7:44:dc:0e:2c:a5:f1:e8:cf:5f:ea:76:a5:e8:
4c:bc:23:c0:ca:83:a0:1b:4b:c8:49:20:7e:39:a8:ce:97:4c:
53:82:18:86:20:d1:39:de:f1:5c:ba:e3:f3:50:e0:f6:27:62:
ea:6e:a8:40:2b:a4:f7:79:b9:b2:c4:fe:9a:3b:4a:8a:b8:ec:
cb:92:88:00:88:56:1f:56:16:56:95:45:5a:87:ff:84:94:f4:
dd:61:44:46:a3:93:60:73:71:95:93:77:28:a5:1c:76:0f:99:
d3:8b:8c:06:fa:f7:ce:9d:e2:a1:e1:ad:1c:7f:8f:9a:5e:ad:
0d:06:45:28:a2:51:9e:c5:3b:d7:fb:2a:50:6f:fb:20:47:9f:
67:be:34:7b:d4:87:bb:c4:49:86:6b:dd:b2:cf:fd:f4:09:21:
82:c5:7a:2f:2a:ed:eb:f6:79:4a:8d:a5:c2:e2:d3:12:c7:c0:
c1:c2:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:25 2025 by rpki-client