Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft
File: AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft (raw, json)
Hash identifier: S423YY0y32mtqV2XpLNxcouq+BMoz07k+vGjuf9Rwew=
Subject key identifier: 1C:F4:57:39:A7:AC:CF:2C:DE:92:6F:66:3D:7B:20:5C:36:CC:32:CF
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 018C39DAB03A8A3B27E637BA005E18DA16F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft
Manifest number: 0FCD
Signing time: Tue 05 Dec 2023 12:01:22 +0000
Manifest this update: Tue 05 Dec 2023 12:01:22 +0000
Manifest next update: Wed 06 Dec 2023 12:01:22 +0000
Files and hashes: 1: AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl (hash: +Xz5ZT1AN7BU4g7Ap/IagnniZy+KEVypJDkZ2/lsSRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:da:b0:3a:8a:3b:27:e6:37:ba:00:5e:18:da:16:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: Dec 5 12:01:22 2023 GMT
Not After : Dec 6 12:01:22 2023 GMT
Subject: CN=1cf45739a7accf2cde926f663d7b205c36cc32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:bc:ef:5f:9e:55:a4:09:22:f3:93:bf:76:
96:6c:70:f8:9b:19:a7:84:71:32:56:bd:99:49:32:
04:5f:f5:23:42:55:78:b8:ac:3c:bd:2c:f6:97:e6:
87:d3:39:1e:fd:e6:1c:bf:f1:60:a0:67:dc:0b:a8:
24:a4:87:87:e4:dd:8e:38:a2:ec:ca:a3:1a:54:b2:
f9:16:53:3d:4b:3d:82:0b:7d:7a:52:08:4f:95:e4:
4c:d1:1a:fe:b5:3e:9b:bf:be:b3:37:3b:8b:17:8e:
37:f2:a3:71:1a:87:6f:01:d4:2a:0d:31:13:9d:7f:
71:e9:19:06:74:91:4f:34:2c:81:e1:c9:a2:e4:12:
52:c1:ab:9d:90:58:29:f7:62:1a:15:2c:d6:6b:51:
27:1f:79:64:55:b0:26:52:81:51:2e:6f:7a:71:e8:
14:3c:6a:c1:64:af:79:aa:87:89:59:21:bc:92:d0:
ad:a8:26:97:0a:49:5c:4a:b9:19:c7:78:a4:44:fd:
3f:10:42:3d:fc:85:f7:69:1f:ec:2f:4c:ef:bc:ba:
97:1f:df:4a:95:cc:0e:57:f8:21:86:3b:fa:74:8a:
17:3b:bf:1f:6a:ba:9d:ee:23:f8:52:a2:9f:27:d6:
39:d2:e3:03:c4:ff:65:08:85:97:cc:1b:f1:15:cc:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:57:39:A7:AC:CF:2C:DE:92:6F:66:3D:7B:20:5C:36:CC:32:CF
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:56:a3:ba:83:74:d7:7b:c5:4a:33:23:7f:0c:fd:a0:e7:
bf:60:fd:4f:88:bd:b3:f0:df:32:56:50:9f:5e:54:90:d3:e4:
98:27:2f:be:b6:61:a4:39:38:41:d4:2a:42:d5:8b:73:2f:57:
85:b3:cc:46:aa:da:f7:b1:74:bc:1d:b5:d4:8b:42:c6:52:87:
b2:31:2f:07:8d:49:df:a1:0e:8f:f2:98:d6:d8:30:84:1c:c2:
63:fc:91:ed:d4:b0:c0:8a:b9:0d:0a:7f:ca:e4:92:58:f6:fc:
24:c2:92:ce:9f:88:6e:ad:53:18:44:dd:a7:46:54:50:52:17:
32:69:d8:dd:9e:45:27:1c:7c:a2:8e:67:27:a2:57:05:c7:3f:
07:dc:86:a7:04:62:79:ef:5c:04:4d:20:74:7d:bb:49:30:47:
08:8a:27:13:17:d4:c5:93:d3:90:fe:bc:1e:90:1f:2d:41:44:
2d:2b:29:d0:54:f8:a5:6e:3c:7a:3c:b1:d2:7a:57:44:f8:52:
7f:e0:88:f3:f6:aa:1d:03:6f:da:a9:61:26:c9:04:f3:52:17:
af:3b:e3:77:62:39:7f:63:8c:59:d4:90:b3:dd:9a:94:a0:eb:
d8:1e:12:c5:bb:be:dd:6d:79:9f:a4:af:df:ef:9d:25:c7:88:
15:e2:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:45 2025 by rpki-client