Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft
File: Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft (raw, json)
Hash identifier: x7knCY3jmwo/u6VeqtRV4+m9d3yVgR4uIoMbFg0LRek=
Subject key identifier: DA:D2:B8:FD:C5:CD:5F:59:54:6E:6F:BF:33:66:8A:B7:D8:73:17:8C
Authority key identifier: 02:0F:E6:AF:D3:F9:35:C6:BE:CC:34:F5:40:4B:3E:E1:80:18:1F:7E
Certificate issuer: /CN=020fe6afd3f935c6becc34f5404b3ee180181f7e
Certificate serial: 0194AC5B2BB264BC9260BAD90AEBA3B2EEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ag_mr9P5Nca-zDT1QEs-4YAYH34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft
Manifest number: 066C
Signing time: Tue 28 Jan 2025 10:00:43 +0000
Manifest this update: Tue 28 Jan 2025 10:00:43 +0000
Manifest next update: Wed 29 Jan 2025 10:00:43 +0000
Files and hashes: 1: Ag_mr9P5Nca-zDT1QEs-4YAYH34.crl (hash: ANVhKFSsA6M6evjUua+l56sRXtAFVNTcUKAXDNQR1sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:5b:2b:b2:64:bc:92:60:ba:d9:0a:eb:a3:b2:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020fe6afd3f935c6becc34f5404b3ee180181f7e
Validity
Not Before: Jan 28 10:00:43 2025 GMT
Not After : Jan 29 10:00:43 2025 GMT
Subject: CN=dad2b8fdc5cd5f59546e6fbf33668ab7d873178c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:a5:7a:47:de:e9:57:f8:c6:0e:e0:16:96:
a6:dd:24:f5:1b:3e:1c:28:cc:c0:d3:1f:6f:fa:39:
fe:1c:8f:23:f4:f2:fb:1c:80:7a:3a:0b:78:c7:a5:
ea:9c:77:a8:86:1c:2d:b9:21:64:3f:0a:29:72:00:
f0:2e:23:76:62:35:7b:9d:91:52:4f:b1:5c:9d:f1:
fd:2e:66:30:4a:51:d4:03:8e:63:08:ca:7b:82:d1:
61:03:e5:69:51:d5:f4:ec:da:10:fe:f6:9b:50:ee:
10:e2:28:b1:17:d1:a8:64:9e:c0:8c:ba:8d:62:c7:
9d:74:c7:4d:2e:d7:46:0e:35:08:af:05:cd:31:6f:
38:45:c1:a7:54:af:5d:cb:17:d3:70:15:1f:26:95:
26:34:e6:9a:ef:33:f2:3d:d2:58:65:64:a3:ab:f7:
68:90:65:16:50:ac:53:3d:50:c3:0d:ff:37:97:84:
f3:7e:b0:38:0c:ed:d6:0b:c7:b8:3f:8a:f0:a6:58:
b8:ee:3a:ed:f0:15:90:cf:76:0d:bd:9d:38:98:f9:
ed:7d:0a:3b:71:55:1e:35:26:ea:cc:9f:61:7c:7a:
e2:c5:ea:9c:79:8a:44:0d:2e:28:60:37:65:c9:42:
51:53:4c:06:f1:d6:cf:d9:8f:f1:78:77:86:df:96:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:B8:FD:C5:CD:5F:59:54:6E:6F:BF:33:66:8A:B7:D8:73:17:8C
X509v3 Authority Key Identifier:
keyid:02:0F:E6:AF:D3:F9:35:C6:BE:CC:34:F5:40:4B:3E:E1:80:18:1F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ag_mr9P5Nca-zDT1QEs-4YAYH34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/74c133-7d50-461f-8dba-79fdf65d4914/1/Ag_mr9P5Nca-zDT1QEs-4YAYH34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:da:ac:7d:a9:bd:35:af:4e:9d:91:d0:0a:4a:58:bc:39:
b6:72:cf:bb:33:2c:66:b2:29:1c:55:bc:8a:d8:0e:41:3a:7d:
04:07:1e:d3:a4:ad:7e:c4:53:3c:a6:23:21:c4:85:da:69:fd:
f1:56:a0:b2:4b:75:f9:e9:d9:5c:70:f3:c2:4a:61:8a:ee:9a:
d3:ea:3e:b4:e9:d6:92:f5:cb:0c:db:1d:d9:6c:e1:e4:6c:61:
f4:44:12:71:f8:8d:7f:e5:61:b1:05:65:2c:fc:6d:91:ab:59:
3e:75:2e:58:d9:ef:ed:32:d1:26:3f:ec:90:ef:c3:3d:c1:e5:
ec:e7:5a:cb:83:6d:da:f3:5c:ea:db:79:a4:92:4f:7a:23:37:
f9:c9:12:e1:21:2e:cb:74:27:ed:43:ae:d1:1d:c1:8c:9d:c8:
ee:dd:a3:9e:b3:bb:4a:6a:4d:4c:84:1d:6e:fb:5e:d5:9a:83:
45:14:27:1d:a0:9a:89:63:a3:38:6d:97:c3:d8:1b:ea:41:05:
d8:82:04:57:29:71:31:7a:ea:54:62:0b:6a:e8:9d:ec:cc:a6:
6e:c3:9a:f4:f6:36:94:44:f4:73:41:dd:6b:f9:9b:fd:59:b2:
16:eb:b9:8f:54:eb:d9:89:ea:ec:55:59:0a:dd:9e:00:08:04:
f7:0f:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:05 2025 by rpki-client