Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: lZjMDFjK+/4J3PgD4Uk6b2OEbRSYYcmDm+5NNhLWK6o=
Subject key identifier: E5:45:E6:38:45:16:77:9F:19:D0:CF:62:F0:3C:09:08:5C:4B:C7:CA
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 0194BD17EB67B6368315B32EDAAAA31961DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 105F
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: GAEXPd3fKZcbX35fmG/LdFxiByGn44vX8X+M9FxmN8w=)
2: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (hash: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:67:b6:36:83:15:b3:2e:da:aa:a3:19:61:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=e545e6384516779f19d0cf62f03c09085c4bc7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:7a:7c:cf:92:11:3f:e3:bb:be:ee:f5:33:
c2:85:25:88:0f:4f:06:a2:c7:21:f1:24:4d:f9:a2:
6d:80:c3:d0:4b:c3:5e:78:d2:12:13:83:a6:6b:9e:
2f:71:9e:4f:5d:32:d3:8c:f8:9d:6f:70:7c:c3:00:
4c:65:4b:fc:26:60:bc:25:3d:4b:be:c1:20:08:80:
9b:8b:0f:3d:bb:bf:db:b5:51:6d:81:f7:33:86:0a:
0b:a3:92:3b:23:83:fe:33:e5:46:b6:fb:5f:2b:8a:
44:d3:51:44:48:fb:88:23:79:01:a5:53:1b:d6:5a:
c6:4a:65:b3:ad:cb:bd:6e:a3:93:5d:7c:51:34:8d:
62:ce:47:a6:ed:0b:d7:c1:a8:0f:b3:bf:3f:f9:87:
a9:79:a3:88:a1:09:4d:60:0c:cb:26:c4:1e:e4:66:
0c:df:a6:de:8b:11:8f:7f:e2:4c:4d:2b:99:b4:c7:
84:e6:96:ed:21:9c:3e:42:33:d0:48:20:83:7d:77:
19:c0:38:46:3e:ec:37:5c:64:a3:26:48:df:d0:6c:
26:68:46:12:a0:4c:aa:95:34:fa:ec:af:21:6d:91:
1d:ce:0b:e7:64:ee:f4:52:4c:ee:03:33:f2:6e:7e:
37:4a:f7:a7:bb:55:c7:b7:b1:84:6c:b8:e2:04:84:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:45:E6:38:45:16:77:9F:19:D0:CF:62:F0:3C:09:08:5C:4B:C7:CA
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ad:ec:a2:96:5b:42:e7:12:bb:b1:7e:90:3a:9d:54:f3:5b:
ce:66:44:7c:15:51:c6:61:50:d4:7b:5f:06:8e:6c:cc:e6:6c:
a1:91:08:15:75:e1:99:fb:a4:a1:60:ad:22:7a:9b:b3:34:4f:
4f:3f:f0:a9:4b:c6:ff:13:cd:dd:d7:f2:18:bd:11:ef:3f:a4:
ed:97:3d:30:45:c1:aa:1f:9e:2d:e8:db:4b:32:a4:d6:ca:76:
19:1e:0b:8f:a0:c5:c3:b4:62:d7:13:a7:78:50:4c:24:13:cc:
26:1f:1c:17:7d:c0:07:20:2d:c7:ab:fe:e7:90:09:1f:9e:31:
ff:63:18:a7:08:c8:92:fb:03:b1:df:85:18:2b:13:83:c8:1a:
49:67:c9:16:58:05:ab:98:d5:5b:0f:f0:e4:fa:37:2f:83:dd:
b5:ee:88:dc:4c:49:3e:dc:84:68:45:82:21:ce:86:af:e8:3e:
c9:16:3c:3b:e5:66:0a:b5:f0:cb:77:4b:23:5f:7a:b3:68:08:
f0:bb:08:cb:41:c4:b0:02:77:65:7c:a1:f2:04:ab:ca:5e:50:
f7:d1:64:4d:69:e5:90:66:81:81:8c:4c:7a:81:cb:39:88:5a:
ae:d7:15:b6:b9:bc:04:5e:fe:5c:a3:46:ff:5a:96:b8:0a:29:
b1:28:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:02:40 2025 by rpki-client