Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: 8mpq9nvlhVN7XNKJ6jLZObPSjglLzarqfUOflzQn8WM=
Subject key identifier: 65:76:FF:53:C3:36:7C:B7:98:29:E3:A4:73:DE:09:47:35:88:B1:E2
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 0194BD4EAE5249A7ABCF09544A67B9187CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: scLNeauiomSitSEB8yEV96TBK7VmDPfyQBieZKtL1nU=)
2: nJZ2h-CE2RpObbNuUbuQAsAe9wo.roa (hash: XjXLrJ8ZAfMXOtdh84OSK02UeKqf16aa2sgmGiELBao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:52:49:a7:ab:cf:09:54:4a:67:b9:18:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=6576ff53c3367cb79829e3a473de09473588b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:7f:e3:60:a8:90:74:b6:eb:93:bf:51:5c:
44:0b:16:47:54:75:36:e8:76:ec:60:2d:d9:6e:46:
fa:c7:af:7b:d1:7c:5e:da:58:d6:f2:b4:74:8f:81:
d6:e7:9b:69:03:1f:39:98:f1:73:33:67:aa:ae:86:
0c:3d:93:9f:9b:f0:cb:df:5e:8d:f2:f7:ea:65:a1:
0c:80:5f:3d:21:fc:cc:f4:17:9d:05:6a:e5:e1:6c:
c1:ed:59:58:05:5c:57:bd:9d:9f:3c:ef:df:68:d5:
17:9c:44:b2:00:81:71:71:f9:2a:68:12:e3:17:1f:
46:7a:a2:03:f5:51:80:4f:c8:83:ed:11:33:07:2c:
b2:b1:ca:fd:a0:74:87:7c:22:12:70:dc:4e:52:6a:
68:02:18:4c:f6:62:73:8f:72:af:ef:62:74:11:9a:
77:91:e9:96:da:ea:69:42:2d:6a:16:c1:92:50:b5:
0c:e9:81:e6:3e:27:78:37:18:aa:f0:e1:2c:fb:94:
7d:3c:06:46:b8:2c:42:29:5c:23:f2:91:87:e8:44:
9e:e2:fb:d4:e9:33:73:90:5f:bd:7c:e6:7f:22:8d:
09:48:7b:c3:3b:31:78:1d:9f:03:f7:2d:07:7e:8c:
1c:e8:4f:eb:5a:b9:6a:0b:b0:e2:f9:02:16:af:15:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:FF:53:C3:36:7C:B7:98:29:E3:A4:73:DE:09:47:35:88:B1:E2
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e8:08:ea:e7:63:fa:c5:ec:cb:9a:e2:c6:f5:3e:d5:94:07:
ca:f0:bb:94:61:31:f9:4f:27:40:8b:32:35:6a:3f:aa:22:20:
b9:a3:91:4c:6f:23:b4:e1:08:2e:db:fa:39:db:4c:3c:a0:ae:
bf:d6:d3:a5:cc:56:c4:84:83:94:41:29:df:7d:1a:d8:b6:1d:
2f:98:99:b7:f4:26:31:ed:84:ea:02:85:f3:ad:e4:8e:4b:04:
15:9c:d9:07:44:df:e0:bf:d4:7b:15:d3:99:40:68:69:80:01:
5b:8d:3e:51:38:b6:35:f1:d3:14:e2:d2:63:82:5b:a1:7b:09:
d1:c3:3d:5b:ba:7f:9d:81:a0:26:ce:54:0d:e5:76:b4:b7:c3:
f6:d5:52:13:1f:aa:5b:18:7e:37:9c:75:45:b9:c1:33:a6:61:
17:02:3a:fd:b3:54:cc:03:ae:61:99:e0:76:c6:5a:4a:3c:9c:
f7:7b:3e:cc:2a:e5:b2:d9:7f:cf:5a:42:8f:41:f5:98:2e:21:
ed:83:af:72:45:aa:b4:0f:9d:7b:51:c1:dc:3c:23:93:58:e0:
97:46:c9:e3:b2:63:97:8e:e4:f2:5b:3b:38:9b:ed:be:aa:9d:
e5:4b:02:fb:95:e4:66:c8:9d:ee:38:c2:fb:b9:b9:d6:2f:66:
26:cb:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:52 2025 by rpki-client