Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: 8HdH2mN7jJ/zadB6SduzHXvlKYcBsU6+J8NqG5F4V7o=
Subject key identifier: 6E:6B:19:66:5B:2F:57:91:02:B0:9F:50:13:57:AA:7F:A6:4B:88:B6
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 0194BBCE123AC050A5CE1DB4814B2D0ACD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 7D
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 1-FEZQAYxKOGbZtNoqgp3TsBstBI.roa (hash: mWm1xa0GsvGR4VAPAVWmqUQ/c+wTEHDE2Bz7si4FFW8=)
2: Hc3x7cMMhQ2pFoiy2saJ4XllrVE.roa (hash: B1k+alzkgyWX1Dzf52yEQFBGvjvNE4DrGgKVq+glwN0=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: 9f8NLMvgTey5knEhczsffTT2vYCMpoE0Gs8xegVOvtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:12:3a:c0:50:a5:ce:1d:b4:81:4b:2d:0a:cd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=6e6b19665b2f579102b09f501357aa7fa64b88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:ef:b8:32:7c:0c:48:c6:62:48:00:4c:fd:
94:15:f0:65:d7:fa:a5:8e:b7:01:8d:ad:47:8e:9e:
7e:61:c0:58:84:8d:f8:5c:51:9e:c1:db:61:0f:40:
b9:42:72:87:65:ec:76:b4:d7:c8:13:d5:20:89:31:
90:8c:92:f2:fc:6d:22:77:91:a4:fd:d8:61:38:20:
80:1e:a1:2e:94:62:2c:30:f7:a4:60:a9:fe:2c:6f:
a2:8f:d8:e7:21:4f:13:c6:1e:22:a4:99:82:4f:2b:
8a:82:a3:8c:79:f7:f5:53:29:58:4b:d2:d9:51:34:
ca:0c:b8:d1:50:cb:66:fd:5b:fe:fd:d5:76:98:a0:
ca:63:11:ac:87:88:1e:ac:38:4e:d7:1c:8a:3a:68:
7b:37:ed:1f:4a:fd:ae:d6:f8:9b:b4:4f:b3:41:bf:
35:f7:20:16:a5:8e:b0:0e:57:c8:81:32:5f:6d:ac:
64:d9:88:e8:3f:32:37:82:60:5b:62:a9:74:ef:3f:
82:6f:22:e9:82:fc:f4:86:d4:80:1a:fe:30:93:0e:
78:93:16:da:e7:40:4d:f1:f3:a0:7d:70:1a:34:7b:
4a:09:a8:a6:ec:49:65:83:fe:6c:66:c2:a9:ba:ec:
2f:be:46:d8:08:4c:4b:d9:a1:f3:af:a2:28:8c:fe:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:19:66:5B:2F:57:91:02:B0:9F:50:13:57:AA:7F:A6:4B:88:B6
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:34:d2:88:85:ee:9a:a0:f5:e7:9d:80:b4:d3:be:0c:ce:7b:
a2:8b:77:83:a5:1c:5f:1c:62:fc:d6:7a:f4:ae:46:70:a6:11:
9d:ef:2e:97:fc:6f:78:0e:ee:b9:cc:c3:0a:7b:d3:83:36:e5:
86:4a:bd:c2:6b:98:44:98:8b:28:1f:c2:99:ce:54:f2:86:50:
74:30:58:d1:99:27:dc:64:eb:63:6f:b5:2f:6b:95:ef:a8:ff:
7b:be:52:5d:e6:93:7b:c1:d9:d8:49:29:7d:fc:29:58:68:9e:
a9:c3:3f:a5:d5:e7:83:4e:ce:7c:f6:eb:48:26:32:b1:33:23:
65:8c:3a:12:64:58:4b:42:a4:d4:0c:59:25:75:ae:93:16:fa:
b2:7a:96:92:fc:46:d5:4f:1a:c0:1a:0d:13:dd:7d:b5:ef:45:
05:4f:02:1a:ef:03:ff:85:f1:58:c9:91:7d:5c:86:a7:1f:5b:
84:6e:e0:da:a2:e2:77:1c:1a:79:10:de:f0:c3:8b:0b:84:09:
a8:2d:63:02:9f:ed:74:5f:ad:3b:c1:85:dc:03:aa:c6:b4:fc:
a1:b9:e4:7d:10:4c:24:9d:5c:38:e2:af:f3:e9:f6:58:5e:32:
7c:a9:16:de:21:39:67:cb:d9:09:c9:fa:1c:6b:c0:76:04:ee:
ff:f3:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client