Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
File: rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft (raw, json)
Hash identifier: 7l5x52M9ARVZKM47vCaYzrxJ1O5gSLd+du00Xgw5W2s=
Subject key identifier: 26:7E:9B:A3:17:5F:CF:63:E8:82:36:51:16:EA:13:CF:BA:94:15:47
Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Certificate serial: 0194BC3C69CBDDB1551F54B299C41A566C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: QsrgGtjjVfYUdnjVBy3FKVxOReM.roa (hash: /bct/glFTr5+fLpXRU1WLa/LnjLyQigL1zGVjyxrPQI=)
2: rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl (hash: 812c6YIkRw2TcQzTus6mDUWjIE8ULwmiheBS6HSpnDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:cb:dd:b1:55:1f:54:b2:99:c4:1a:56:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=267e9ba3175fcf63e882365116ea13cfba941547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:8b:83:a3:3e:99:6d:b0:16:b9:17:de:5b:
11:9d:5b:43:f0:5d:7b:fd:58:5c:80:34:cc:f3:5b:
c9:2d:c6:15:67:34:5d:fa:d2:7d:cf:8a:32:f3:90:
97:56:ff:33:26:44:41:d3:b4:86:1d:d4:6e:b7:d5:
25:24:d1:9b:0b:d0:02:44:e7:f9:b1:79:71:a7:e8:
77:0e:f1:18:d5:c4:3d:cc:4f:1a:72:48:95:82:e5:
ab:ed:fa:03:30:17:10:8c:9e:7f:fe:1b:0b:14:7f:
88:e2:39:2c:fe:15:77:12:26:b5:f7:8f:22:44:9c:
a7:2c:a6:db:ed:54:80:97:da:cc:d3:23:20:4a:e5:
5a:da:d6:04:9f:ab:dc:32:c8:8e:77:7d:29:64:46:
ef:34:47:14:f9:30:13:89:70:f6:30:a0:87:e4:a9:
dd:f4:c7:7d:b6:43:99:2b:7a:1a:46:2f:7c:8b:52:
a7:38:74:1c:84:00:01:78:aa:d3:34:80:ed:61:2c:
4c:aa:da:ff:59:c9:f7:82:e6:e7:42:07:e6:16:87:
bd:e9:a2:55:7f:6b:99:5f:2a:77:73:f0:83:e4:83:
4f:c2:f3:48:8d:ae:e9:6f:3b:0f:37:c2:51:43:3b:
1b:12:0b:3b:ac:7b:28:01:e4:42:41:dd:99:8c:56:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:9B:A3:17:5F:CF:63:E8:82:36:51:16:EA:13:CF:BA:94:15:47
X509v3 Authority Key Identifier:
keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:3a:8d:19:23:93:27:87:7a:35:7f:b9:66:4e:1f:ac:e6:88:
cf:1c:8d:ba:46:6e:9c:b9:47:b8:c9:e8:83:65:3f:f9:9f:5f:
df:1c:86:75:67:3e:b6:03:f3:74:08:54:b2:7e:1c:81:dd:7f:
26:a9:85:56:24:eb:c2:5f:b4:8b:00:0e:f8:57:af:f0:c5:80:
b4:44:86:14:e5:a1:59:74:26:44:a0:cc:d6:cb:f6:f9:c0:8a:
b0:9b:91:6c:6a:65:48:a2:65:2f:56:33:b4:66:14:6f:6a:ca:
36:70:d0:1c:d6:d0:b9:aa:30:45:f2:a7:c5:67:f2:32:ee:98:
01:be:97:a0:b4:f6:ab:4d:bd:7a:01:63:49:41:36:4a:01:bd:
31:e4:c2:54:de:23:b3:3d:29:ed:4e:4d:91:b1:88:df:fc:59:
72:a8:d9:07:9a:6a:d6:3a:ca:12:b0:3d:28:49:c7:5c:e3:26:
17:41:ac:a5:5b:cc:76:f8:99:1e:87:60:ea:7d:7b:db:48:66:
ae:40:37:56:2e:3c:33:7e:c8:22:86:e1:c8:7c:23:d4:65:a8:
b9:04:9a:eb:35:1c:64:a9:ae:f7:4d:c5:ef:ef:d7:2d:52:ff:
78:d0:7f:53:5f:af:60:20:26:0a:7d:b3:dd:0c:a5:d2:14:22:
79:67:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client