Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File: a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier: dsuMsk70eWGZpBL4PbN59HqfaIbyuP7WqH+RageT4T8=
Subject key identifier: BA:28:D4:AF:24:1C:D3:57:55:50:64:86:1E:AC:4D:9E:E9:7C:91:F1
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer: /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial: 0194BCA99B3A8E2A4AC1EEA31D8EF33BB32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number: 0A67
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: IpPxqrkAJLVsXHeB04cvVHAP5Fg.roa (hash: VtX3ApkZgzYiR7CYiCSZq34MU+2YZHhoSAVs9vYdqbA=)
2: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: 7fk095VOPZTnZb+3DWIzHgMOywQwTfYWbR1vQJoLVOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9b:3a:8e:2a:4a:c1:ee:a3:1d:8e:f3:3b:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=ba28d4af241cd357555064861eac4d9ee97c91f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:8f:cc:cc:b7:5d:66:e7:98:02:85:0d:1d:
60:34:35:13:18:d4:8c:65:28:8a:0f:01:ec:fa:d3:
a1:8a:49:ec:35:16:e5:dd:f1:97:93:79:22:c3:3a:
a8:e0:c1:89:5d:e2:57:3e:32:e1:79:f2:ce:c8:59:
2f:b6:95:ea:85:d3:c2:9d:8a:db:34:b1:45:1a:ab:
80:db:71:54:80:ca:ae:8e:e1:3f:84:1a:7e:c3:94:
de:e7:0b:25:f7:b3:de:e2:c1:53:69:47:07:6b:f4:
fa:1d:d5:3a:7f:7d:2c:8b:ac:c4:c6:7a:0a:04:75:
c4:fd:c6:ff:38:6c:5d:2b:48:3a:db:18:ce:9f:87:
f8:13:1f:46:86:c2:05:c2:cc:64:3a:66:d1:74:c4:
8c:21:ab:57:07:f2:3e:c3:19:9a:f6:6b:f3:95:d1:
d3:0b:ab:34:be:28:4c:75:80:fe:1e:d9:29:4a:d1:
e7:7f:42:8b:bf:01:7f:de:72:d7:f9:cb:a0:7a:90:
91:10:95:2e:4a:d5:87:09:d1:8d:31:bf:0e:43:bf:
47:7e:2b:d7:8e:18:73:32:8e:8b:f2:5e:ca:e1:dc:
86:d1:5e:d9:17:74:b9:19:e4:d3:1f:bb:e4:cf:5c:
86:7e:aa:6e:65:b0:ef:46:ca:9a:f1:55:52:1f:01:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:28:D4:AF:24:1C:D3:57:55:50:64:86:1E:AC:4D:9E:E9:7C:91:F1
X509v3 Authority Key Identifier:
keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:de:8b:bd:3c:20:16:ea:dd:97:e5:26:c8:19:5c:06:1e:
94:49:f3:df:bc:33:fb:d3:9c:42:2a:08:ea:bf:77:99:57:f7:
65:16:6c:9c:39:01:4a:16:44:69:62:1d:2f:db:cb:3b:39:6a:
ad:ba:9a:9b:ef:3b:e8:1a:57:1a:94:e3:0a:fd:2c:5c:13:7e:
08:f3:6d:1e:31:95:1c:0e:9a:f3:59:fd:93:c0:55:42:1a:7f:
37:41:38:f4:b6:cf:5e:38:8a:37:87:f3:4c:ba:d6:e1:3b:4b:
59:ad:7e:1f:08:ae:c4:7f:5c:f9:eb:9c:ec:24:03:ff:b9:c0:
ea:7e:51:77:52:f5:96:aa:a4:57:89:90:79:b1:6a:ba:d8:f5:
85:33:80:32:fd:5f:e4:46:4a:62:a9:a3:f3:7b:25:51:c6:1c:
ed:5a:d6:6c:b9:5b:19:9f:37:82:ab:f9:1d:5f:2b:c9:61:24:
cc:6e:14:03:53:0d:61:cf:03:8c:61:f8:ea:75:3c:70:25:9b:
21:ab:5e:3a:13:9f:52:28:9d:51:c1:f4:7b:bc:24:ba:70:67:
41:94:32:73:1a:ef:f9:5c:85:85:54:d3:3c:8e:92:71:d3:56:
34:c2:82:e7:80:1d:67:fc:3e:db:8d:44:e1:85:a8:42:39:c5:
25:23:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:47 2025 by rpki-client