Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
File: Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft (raw, json)
Hash identifier: fbLorz0TrWboU7tx+oyjtA5Q7JMQv81fGq42UcrO/vg=
Subject key identifier: 10:3B:2A:D1:47:10:AC:0F:A6:3C:63:F7:7C:03:23:3A:92:C3:83:01
Authority key identifier: 02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
Certificate issuer: /CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Certificate serial: 018CC81E94A23233CCEA98AC4048F7C926C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
Manifest number: 0620
Signing time: Tue 02 Jan 2024 03:01:36 +0000
Manifest this update: Tue 02 Jan 2024 03:01:36 +0000
Manifest next update: Wed 03 Jan 2024 03:01:36 +0000
Files and hashes: 1: 4EaNVMMy7vZ1buyS1ymiF2kElqM.roa (hash: rywt7flGROan2UizLkq60w93q5IVhvo0S9hBxc5r9Xw=)
2: Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl (hash: fWDIjrqtKk117G0HCnB+u983wWP4bvFjUzFPVmbNGe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:1e:94:a2:32:33:cc:ea:98:ac:40:48:f7:c9:26:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af2e2a3b6a1f52fe132489fcd5b31bd6d21fe2
Validity
Not Before: Jan 2 03:01:36 2024 GMT
Not After : Jan 3 03:01:36 2024 GMT
Subject: CN=103b2ad14710ac0fa63c63f77c03233a92c38301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:42:5a:8d:2a:2f:83:c6:c2:5a:4c:84:38:
45:ba:4d:01:83:fb:5b:0a:f5:c0:f4:38:bd:0b:3d:
99:5d:4c:30:52:97:84:20:99:98:69:bf:26:23:cb:
ba:67:0a:ee:14:65:2e:97:09:af:ce:56:d8:54:73:
4c:35:83:ad:b4:aa:c4:03:69:8d:b1:50:95:78:9e:
19:5c:e3:17:57:ad:4e:2d:7c:c0:f7:4f:0c:c7:15:
e8:bd:27:61:82:96:02:97:f5:5e:76:e3:b0:9c:18:
f7:89:e2:55:02:66:1f:1b:25:7e:ff:5d:aa:0b:93:
5b:01:7f:b0:67:33:f9:f8:06:24:94:62:b3:b2:0d:
37:6f:60:3e:98:90:69:cb:20:41:27:78:d9:cd:62:
45:48:b8:0f:92:5e:f7:56:b7:27:bf:84:60:e7:2c:
f9:98:82:e7:c5:40:4c:f6:45:d1:32:7b:fd:49:77:
b4:6c:6f:e1:c5:de:da:00:4b:85:4b:7f:ec:d6:06:
af:ca:0d:4c:dd:ad:5a:2b:8f:44:4c:4d:28:c8:84:
6d:6a:08:7e:85:e5:f2:e6:8c:39:d0:c0:83:eb:fa:
cb:69:83:9c:4a:30:b1:63:db:d4:34:9b:09:0c:2f:
d2:8f:41:c8:1c:a5:28:00:a8:a9:e7:f6:2f:12:39:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:2A:D1:47:10:AC:0F:A6:3C:63:F7:7C:03:23:3A:92:C3:83:01
X509v3 Authority Key Identifier:
keyid:02:AF:2E:2A:3B:6A:1F:52:FE:13:24:89:FC:D5:B3:1B:D6:D2:1F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/feb986-5e55-4d4c-997d-df170531fc8a/1/Aq8uKjtqH1L-EySJ_NWzG9bSH-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fc:df:6c:06:f9:1b:92:51:3a:35:aa:56:0a:25:79:42:af:
69:1c:95:13:cb:e9:7a:c7:12:80:02:67:b4:55:05:10:a2:8b:
7a:f9:4a:22:14:c1:8b:ee:7d:b8:97:e0:e3:91:b8:10:f3:f1:
08:39:af:1f:7c:92:ec:68:a7:92:98:71:79:53:2f:1e:41:fb:
de:70:ee:26:0c:bc:36:2c:08:c3:5a:1c:1a:6c:19:c3:62:f3:
83:27:8a:1d:fc:f8:4e:8f:18:44:f8:ec:2d:24:91:72:c9:96:
f0:b8:5f:93:f6:c0:a0:35:70:87:da:d4:7e:94:68:67:a6:e9:
83:c3:f7:14:03:49:74:03:9f:64:30:5c:b4:f9:b2:b5:99:d3:
3a:8f:2c:7d:45:64:93:7c:e0:20:2a:c1:61:fe:48:b0:f6:9d:
c6:fb:88:23:f0:a4:12:55:51:05:1f:a9:29:71:5f:4f:d2:b3:
9e:c1:83:38:58:b4:8b:d4:fe:a7:69:a6:78:bf:88:68:85:ca:
f9:96:52:15:b5:2e:ee:2e:49:42:b5:bb:00:19:8e:57:88:e9:
5f:c5:9b:d9:d4:4b:dc:f7:ac:0b:19:23:a4:e5:17:79:04:2a:
51:61:f1:98:f9:96:34:66:5c:ca:66:ad:9a:aa:bb:55:c4:fc:
7c:f3:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:21 2025 by rpki-client