Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft (raw, json)
Hash identifier: FSKeVHqkqazsor4FgZmTe9roFn8OAREAMMEbkkp8SZk=
Subject key identifier: 35:09:26:6A:9C:49:6F:86:3D:5B:79:15:68:22:DF:B5:52:04:6E:DA
Authority key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Certificate issuer: /CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Certificate serial: 0194BBCDD9B8EE3016B7584AB3C3CCC15D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: 1-RRFLFYvpdDCB0gIWM3HeWx7I8g.roa (hash: pD8ORJEMQZjbq/pqQVUKzZDauGOud+2TyXVh5uPBOWk=)
2: aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl (hash: sVSrPG5o9aDTdfq2sXNVHFUQioKfsFAzfuCn2UQ4szM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:b8:ee:30:16:b7:58:4a:b3:c3:cc:c1:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=3509266a9c496f863d5b79156822dfb552046eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:d5:a8:bb:61:8b:b0:f0:3a:fd:13:cc:c1:
70:6e:11:2e:cd:bc:48:9b:f3:43:9e:cc:42:01:6a:
36:ad:ce:63:71:72:2e:ae:00:3e:ba:f1:6f:49:a5:
69:82:df:1f:74:95:29:7a:39:e5:c9:58:a9:72:71:
1b:af:cb:d4:0d:09:ab:2a:45:89:1a:98:84:02:9b:
87:ad:c2:a5:3a:af:e5:0a:3f:72:dc:c8:0a:78:b6:
46:2a:69:85:5c:09:c1:e9:70:c7:1c:57:fa:44:74:
54:c0:15:33:3d:da:ba:30:6c:3c:20:60:42:fe:2a:
0f:28:fb:04:1c:74:61:d3:44:09:5e:36:8a:4e:18:
96:ea:79:28:45:20:5d:9b:89:94:6a:8f:51:74:01:
4d:98:dd:52:43:9f:bd:0b:85:4c:7a:21:bc:1b:23:
13:0d:2f:72:cc:96:5b:f6:18:56:0b:18:37:eb:7f:
94:9d:7d:b7:36:5f:43:b7:4d:86:40:0d:d8:99:2e:
b4:36:1c:6c:3e:f3:aa:6b:34:b3:5c:09:60:02:97:
fd:06:63:70:99:6f:cd:14:58:69:43:d1:42:03:09:
81:2a:9e:2e:8b:a0:48:dc:aa:c0:e0:86:2b:58:d1:
73:29:13:ea:eb:9a:2a:9e:da:67:5c:5b:5e:b3:04:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:26:6A:9C:49:6F:86:3D:5B:79:15:68:22:DF:B5:52:04:6E:DA
X509v3 Authority Key Identifier:
keyid:68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:9d:c7:92:03:f5:5d:af:04:d3:d9:c2:c7:c4:0c:dd:9b:
23:01:48:f0:cc:bf:b4:46:e1:4d:23:3a:52:8b:6c:93:1c:29:
d3:64:05:00:46:5c:b4:1d:b9:1b:6a:b3:62:b6:af:1a:48:7b:
f7:c4:83:7b:74:7f:7b:30:46:af:fd:c7:ae:38:e4:22:16:f2:
11:37:44:28:da:b3:13:88:cc:5f:85:43:58:8a:4b:85:b9:1a:
b1:e3:25:e4:5b:3b:28:e2:db:c6:35:2c:db:19:af:f0:64:fa:
09:eb:10:47:03:54:33:21:52:2a:1a:11:d2:bb:11:d0:5e:d4:
da:ec:fc:f5:b1:0c:1c:6f:29:9a:b0:20:7d:d9:61:32:5c:45:
1a:65:87:8a:54:4b:2f:97:fb:cc:a4:2d:ad:58:08:9c:96:70:
f6:66:9e:1a:51:7b:4d:94:6d:d3:3a:dc:e4:6e:d8:7e:f5:08:
51:1d:d1:35:b7:ac:fe:05:95:12:2d:75:73:39:6e:bc:70:da:
bf:bb:0e:01:9d:4a:ba:e4:33:e9:75:24:a7:61:bd:46:eb:28:
5a:a0:95:da:cf:5a:17:dc:1d:ef:6a:03:01:21:bf:6e:d8:8d:
54:1a:f2:c1:e5:ec:85:f9:5e:49:8d:79:24:9d:8b:86:40:fb:
ef:ce:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:42 2025 by rpki-client