Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: JVJuRPoI2N9P7OtM5yq4tYdb926RrTneDRQci+SQeuY=
Subject key identifier: 9E:6F:C6:05:81:25:ED:05:BF:15:D8:E5:64:F5:61:7E:89:14:ED:F4
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 0194BC3C924791A5E560C0531F8412AB72EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 1141
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: HPfHBqT1ZJIQ4cPg2aS18XndYho5Ky/76XGZWnojkNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:92:47:91:a5:e5:60:c0:53:1f:84:12:ab:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=9e6fc6058125ed05bf15d8e564f5617e8914edf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:a6:5e:16:e9:ae:d1:b1:2a:e6:84:08:a0:
93:31:92:70:3f:b1:19:fb:b2:ee:38:bc:cb:68:3e:
aa:2b:06:34:e4:0c:9e:1d:a4:3c:76:bd:b5:35:e0:
5f:f9:02:d6:23:85:ee:bb:8e:18:73:56:7b:bd:c6:
a8:15:39:f2:77:d5:5b:f4:d8:02:0f:21:38:c3:81:
1b:07:0a:85:33:ef:2b:f2:90:ff:6d:a8:a2:90:35:
37:58:1a:43:ce:43:c2:a3:bb:78:ad:e5:d1:8e:96:
5e:48:a0:05:f7:7e:cd:44:1b:4d:07:64:48:36:b9:
78:95:04:99:1c:cc:17:7b:96:84:b8:04:12:20:a5:
e9:82:b8:6a:7f:da:75:63:b0:70:85:8c:69:51:9e:
8e:7c:f0:5b:32:a8:1b:6b:70:44:57:0a:a4:3b:25:
87:89:74:60:0b:61:12:23:d2:db:33:29:d7:3a:e8:
92:cc:77:a6:2c:c8:66:61:a4:49:fa:fb:e5:2e:f2:
a4:aa:9c:08:91:de:7e:64:50:37:30:02:9b:bc:56:
30:09:95:6c:28:e7:3f:e8:88:47:39:d8:a4:99:bb:
b2:61:b8:44:ec:ff:6f:95:21:01:4f:2a:25:ed:2c:
dd:37:73:69:b4:6f:5a:11:26:6d:5e:9d:3c:c0:a5:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:C6:05:81:25:ED:05:BF:15:D8:E5:64:F5:61:7E:89:14:ED:F4
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:bc:08:93:d8:f9:9f:9a:54:3a:c0:26:c5:38:85:3c:95:86:
b9:06:79:65:70:7b:03:85:8f:be:03:f4:bc:aa:8b:7e:85:a1:
87:97:0f:13:fb:75:e9:56:61:d4:50:95:4b:76:8a:b3:ce:46:
ee:6a:98:71:75:0e:a4:40:c2:4d:06:b4:60:a1:4a:e1:09:5f:
a1:30:3d:20:4e:2c:77:b3:32:94:94:5c:7b:83:94:4b:6a:9f:
9f:74:1a:0a:7b:26:70:bc:fd:2f:27:a9:39:19:d7:54:a4:93:
f8:8f:70:47:93:49:86:2d:90:f0:96:38:22:a8:36:f1:27:a2:
44:c1:74:a0:b7:f5:71:db:39:18:7a:5f:e4:3b:4e:b7:49:c3:
ab:89:26:28:1c:34:ad:30:0e:d6:ec:a5:f3:3f:9c:2e:17:84:
38:8b:a1:f5:38:04:69:76:64:4e:6a:59:c8:7a:f2:c8:1e:2f:
6a:c4:97:49:f4:3e:2d:cf:0b:26:ee:75:ab:e8:14:e9:74:93:
38:4a:24:58:8a:44:f2:55:0e:6e:9e:96:e2:29:8a:b0:75:35:
b6:08:ca:2f:73:a5:cd:80:16:d3:3f:d8:e6:5f:ff:b2:4c:4c:
8a:8d:a0:c1:18:69:c3:42:83:03:9a:b2:1e:fa:cf:70:d1:1e:
26:29:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:58 2025 by rpki-client