Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
File: Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft (raw, json)
Hash identifier: BTpJO7XpMVh5pwfkatmcYt05B1t9n2d5JQ+Lqnpa72o=
Subject key identifier: 46:AF:3E:51:F5:EC:21:3B:39:61:0C:83:7B:68:5D:A8:BC:B7:CE:5E
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 018CCA0C7FF707B7928A47063D6419B928F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
Manifest number: 0621
Signing time: Tue 02 Jan 2024 12:01:05 +0000
Manifest this update: Tue 02 Jan 2024 12:01:05 +0000
Manifest next update: Wed 03 Jan 2024 12:01:05 +0000
Files and hashes: 1: 4EaNVMMy7vZ1buyS1ymiF2kElqM.roa (hash: rywt7flGROan2UizLkq60w93q5IVhvo0S9hBxc5r9Xw=)
2: Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl (hash: BTcw9fpdZLjg/shCDIlX12VxNnid4TLAxNtO88q0KAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:0c:7f:f7:07:b7:92:8a:47:06:3d:64:19:b9:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jan 2 12:01:05 2024 GMT
Not After : Jan 3 12:01:05 2024 GMT
Subject: CN=46af3e51f5ec213b39610c837b685da8bcb7ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:c2:9a:c1:e2:00:46:89:3d:e2:0b:48:ed:
e8:64:ce:96:33:06:19:1b:46:43:bf:ca:7a:57:b7:
da:33:a2:cc:4a:a2:f2:a3:1e:c0:7f:05:c0:0e:fa:
40:73:95:ee:0f:6d:2f:d3:0a:1c:f9:66:78:08:f9:
de:79:c0:00:a4:97:b8:df:ac:04:28:6f:b6:07:f6:
f4:45:6e:60:d4:2d:37:eb:64:27:f9:f8:58:63:fe:
0b:65:65:b3:1b:80:31:81:10:c3:21:74:fb:29:7f:
3f:62:0f:72:67:f2:f6:17:55:e1:b9:58:d6:f6:66:
b1:a2:bd:89:c3:66:de:af:9f:42:e5:e6:6f:90:7b:
4c:e0:bd:7e:1a:56:b1:29:87:7c:75:83:84:fb:e3:
e7:b6:10:80:e0:a6:de:a5:2c:3d:e6:2a:c5:6e:7d:
60:d7:16:d0:70:dd:c8:01:4a:1d:50:ff:84:3b:20:
38:62:55:9a:6f:52:48:05:23:30:7a:db:45:a4:c1:
11:4e:04:1f:81:c3:9b:a6:6a:f2:2c:bb:f2:c9:04:
78:78:e3:7a:d8:2a:d5:3a:e6:63:2d:67:d6:5a:e7:
b3:6e:2a:8b:da:87:16:7b:69:b5:b6:b6:1d:95:2a:
8e:e1:05:dd:4b:de:18:88:81:47:d9:39:1b:b2:f2:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:3E:51:F5:EC:21:3B:39:61:0C:83:7B:68:5D:A8:BC:B7:CE:5E
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:64:52:93:ff:fc:19:dc:83:bc:c3:8a:2a:53:88:f9:8b:79:
53:d3:65:e9:c8:79:ae:62:a7:fa:5c:09:3b:14:35:3b:12:0b:
b8:d5:53:39:6a:f3:c6:63:df:46:cc:47:58:37:57:90:4e:6f:
f1:ec:5a:a9:09:80:6a:49:ce:41:af:de:60:77:59:5c:db:8a:
1f:ac:d7:56:ed:ff:6c:55:d3:71:d5:d9:4b:e3:20:ab:d9:83:
5b:00:dc:ea:94:1a:ae:80:47:56:b6:c8:9a:d2:82:65:0d:d0:
90:42:7d:d4:25:03:7d:c0:9f:f4:ed:4c:17:7b:31:3e:41:13:
27:1e:f9:76:64:16:73:b7:84:be:b4:37:a7:cf:8a:bf:f6:7d:
da:33:28:de:f5:f7:1c:bf:25:97:90:35:74:2b:66:0a:be:fc:
f6:d4:0b:88:1c:53:2e:a1:ae:28:2d:8f:04:fc:8b:37:c1:cf:
44:ef:80:38:ca:ac:81:74:f0:84:b1:a5:2e:03:35:31:dc:09:
d9:e1:3d:2a:e0:b6:0f:6f:99:29:0f:58:02:6b:f0:57:a2:ac:
36:ec:c0:25:7f:8b:45:9b:78:d6:ed:d8:9c:d2:82:f1:6e:35:
4f:6f:fb:ff:ea:c6:ed:f3:d0:96:c1:f4:5e:ca:7c:06:2f:4c:
6a:13:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:54 2025 by rpki-client