Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File: AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier: bJq03oq8MPUCeea+Hmn8AftfD6PwUAbYpCR/FYhQnSc=
Subject key identifier: 94:70:F3:21:21:67:3D:85:DC:63:91:64:68:2E:EE:6E:89:10:E7:92
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer: /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial: 0194BCE0B7FD70EE968BE6BB15567C8509A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number: 105F
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: HYwt6+30DAUYqFr+JxOije2s99xwRBLlXQJI4kNgQOk=)
2: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (hash: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:fd:70:ee:96:8b:e6:bb:15:56:7c:85:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=9470f32121673d85dc639164682eee6e8910e792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:a0:eb:d3:8e:3d:d8:65:7c:3d:d6:a0:7d:
13:b6:d5:0b:68:24:57:c0:3f:dc:f2:3c:33:3c:bf:
62:15:34:01:38:93:e8:43:9a:de:6b:3f:17:a7:d2:
82:ee:8a:2f:ee:65:63:25:59:2c:28:eb:1a:1c:3f:
0d:a2:66:42:56:ed:bf:fa:ed:cd:d8:0a:a7:c4:69:
46:99:49:b5:c0:e1:b7:30:7d:c7:59:70:4b:62:bd:
87:90:d7:d4:96:35:cd:e0:40:d4:87:49:82:f4:a7:
b1:fe:7e:5f:43:b8:f7:5e:3f:7f:35:ee:f2:dd:69:
0c:57:c1:de:f4:7f:09:e2:b2:5b:cc:58:cd:0f:2a:
f7:0c:87:22:88:49:ee:61:da:dd:3a:d7:60:64:1b:
76:13:0d:2d:f6:cd:4e:77:06:61:ee:fc:98:b9:3d:
4c:e6:33:96:e6:08:68:02:3d:50:7b:1d:32:db:06:
24:3e:2b:53:d6:46:21:29:e9:d6:cb:58:61:91:96:
70:7a:b3:ba:79:00:46:22:fb:be:a0:75:73:7c:af:
bf:a0:d1:42:d1:f4:e8:f2:28:b6:59:c4:16:34:66:
ca:77:b9:27:6c:66:fd:fc:73:19:56:85:5e:ea:92:
3e:83:ee:e7:c4:d1:46:a4:dd:ac:45:dc:64:32:37:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:70:F3:21:21:67:3D:85:DC:63:91:64:68:2E:EE:6E:89:10:E7:92
X509v3 Authority Key Identifier:
keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:dc:13:e5:23:33:06:89:1b:00:01:1f:91:c2:77:ca:4b:53:
94:34:5e:15:44:b9:64:38:71:2c:07:de:23:17:63:f8:2e:39:
98:e1:b9:28:c8:86:11:ae:56:0b:08:6b:e6:64:c2:94:2f:ed:
0f:80:b6:fd:bb:dc:ee:f3:b3:88:77:f9:21:f5:92:86:9a:fd:
54:bc:0c:c4:f9:14:31:7f:e8:bc:07:88:0d:04:8a:8e:b2:97:
d5:ef:1e:94:75:19:3f:07:0c:da:16:ce:33:c0:6d:a9:6e:8f:
b9:11:92:b7:f6:17:1f:ee:42:7b:50:86:90:e3:8b:9e:bb:04:
1c:a6:b3:f8:c2:68:7e:07:ba:ba:f7:5e:1a:08:15:6a:0e:61:
df:68:11:10:da:d3:59:bf:9e:a6:67:4e:8d:b1:39:47:8c:50:
7d:f3:46:de:83:38:0b:1f:6c:c8:66:d8:c4:d2:89:58:87:d5:
c5:af:bc:b3:79:9c:6e:ac:25:b1:46:68:0c:62:df:84:0d:5e:
35:c9:b3:3f:07:5d:a1:96:df:a4:c4:53:a9:d9:8e:08:4a:f2:
a9:4b:27:f1:04:8b:cf:65:e6:d7:9f:bd:ce:0c:e3:59:bc:f7:
b4:03:71:fd:71:bc:64:7e:2d:a2:78:fc:35:10:7c:87:38:fb:
2b:5d:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client