Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft
File: Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft (raw, json)
Hash identifier: H8AxL0VerhqoCQ0nK2t8N47NPsSUc4BwK8WeqRU3v24=
Subject key identifier: B3:92:A4:1B:4A:86:0A:99:13:FE:39:AF:FE:A8:D5:55:79:81:7F:EA
Authority key identifier: 02:AF:AE:71:41:76:63:AB:E7:7F:FA:59:69:BC:65:1D:58:28:7D:62
Certificate issuer: /CN=02afae71417663abe77ffa5969bc651d58287d62
Certificate serial: 014E9CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq-ucUF2Y6vnf_pZabxlHVgofWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft
Manifest number: 01CB
Signing time: Fri 25 Mar 2022 01:10:14 +0000
Manifest this update: Fri 25 Mar 2022 01:10:14 +0000
Manifest next update: Sat 26 Mar 2022 01:10:14 +0000
Files and hashes: 1: Aq-ucUF2Y6vnf_pZabxlHVgofWI.crl (hash: n6xgempJfL6YR5U676vk0Kuzzvj3WQR2sAXuYfRDh2Y=)
2: fbteU-Za-T6_4XnBDbmOEtqg3LY.roa (hash: CQcZQEmugj19/YMClx7NV7YVhsvoUANHDxWtVvO6iZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21929143 (0x14e9cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02afae71417663abe77ffa5969bc651d58287d62
Validity
Not Before: Mar 25 01:10:14 2022 GMT
Not After : Mar 26 01:10:14 2022 GMT
Subject: CN=b392a41b4a860a9913fe39affea8d55579817fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:07:92:53:ca:e2:53:fe:c7:f3:0a:42:f2:
ef:2d:af:b3:0a:21:d5:44:c9:e5:4f:83:e8:e4:71:
da:44:22:a9:5b:f3:9d:b9:32:6d:cb:24:9d:98:c4:
fc:f4:17:b6:1f:72:c7:56:57:bf:3f:5e:97:db:91:
54:b8:d8:d8:01:ab:3c:a5:f1:3f:34:2c:0d:18:98:
92:87:24:d0:1d:25:5f:52:95:28:9c:1e:e2:8d:ac:
d2:92:56:f0:be:74:2f:ab:7b:c6:a9:7f:d6:8d:5e:
22:31:3b:8a:bd:2b:1d:4c:49:87:bb:c3:11:4c:10:
f6:df:60:25:ca:ec:d3:23:dc:73:a4:d7:da:69:1d:
d1:50:26:e2:a7:8e:cf:12:1a:89:c5:87:0b:9e:d4:
37:d1:82:09:a1:b4:73:d7:66:1c:91:ae:da:f1:ca:
39:7b:8a:c8:63:96:aa:38:2f:3f:9d:ab:06:d3:eb:
d8:2a:1c:40:a5:d6:56:bc:06:fa:84:6f:af:7b:c8:
66:4c:86:c0:ac:68:f7:dd:16:17:12:66:45:27:77:
06:af:54:78:e1:c9:e8:af:18:84:f1:09:01:44:72:
36:f3:86:19:b3:c3:24:51:16:91:aa:bc:e7:f6:6b:
c9:0f:79:f1:b7:47:87:35:20:e1:90:c5:f7:8e:24:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:A4:1B:4A:86:0A:99:13:FE:39:AF:FE:A8:D5:55:79:81:7F:EA
X509v3 Authority Key Identifier:
keyid:02:AF:AE:71:41:76:63:AB:E7:7F:FA:59:69:BC:65:1D:58:28:7D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq-ucUF2Y6vnf_pZabxlHVgofWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2ca089-5975-4c81-8194-317801ef6d59/1/Aq-ucUF2Y6vnf_pZabxlHVgofWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:47:ee:7e:80:89:ad:41:08:fc:e2:22:a9:d3:8b:c7:21:
b9:48:c8:3e:fa:3e:bb:51:8e:a1:ae:1d:af:48:2d:f0:d3:e9:
4e:18:c3:3d:a4:c4:84:8e:02:ad:e1:27:5e:cd:b7:57:b8:71:
ba:50:af:9f:c7:31:0d:84:76:c5:f5:cb:91:e0:ea:12:11:4a:
be:83:c3:1d:7f:bc:41:ca:d1:58:58:59:4b:dd:b3:41:75:fb:
44:92:ca:c1:af:53:ae:44:47:f8:7b:4a:62:b1:fb:c2:4c:43:
5c:4c:62:20:ab:0c:d5:da:e1:d7:45:b1:3b:bf:7c:96:14:0a:
23:cc:b1:84:2f:96:7b:45:57:b4:28:11:fc:5a:55:88:3e:16:
bd:5b:3a:00:b9:22:27:0f:3e:c1:d1:7c:04:4e:c5:46:56:6a:
55:08:ed:e7:ed:57:36:0f:27:05:f0:80:b1:42:be:a9:8a:e9:
7c:75:4b:92:14:48:18:1d:cc:ac:d8:1f:82:75:38:46:11:cb:
4a:fa:75:da:44:6e:f2:6c:70:a2:98:bd:ef:db:c5:cd:85:78:
52:47:0f:61:19:5d:54:e9:b4:62:18:2d:45:a2:cf:22:99:47:
27:b5:4d:bc:74:fe:04:d3:4d:3c:71:1c:a4:b4:1c:aa:af:10:
65:39:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:50 2025 by rpki-client