Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: e9qaIKAUN3AVvzbzKsmjVQNoh1ZGzU9x3sZBJOCX7q0=
Subject key identifier: D5:4D:87:20:6A:89:76:13:08:59:27:DA:AC:FE:3C:72:C8:4C:B7:AB
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 0194BC3C9E7E487D03B89BB6425AF209BFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: 3X3YVDHfZoQR/+N/0BKWa+6BN3Anid/8+AXfAa6UOWA=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:7e:48:7d:03:b8:9b:b6:42:5a:f2:09:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=d54d87206a897613085927daacfe3c72c84cb7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:58:d8:e8:5c:94:39:1c:f3:4e:51:97:34:
4f:a7:b3:9a:d3:2b:a9:3c:e1:27:86:4b:e1:82:5a:
e2:2e:93:bb:a3:6a:08:28:3b:c1:ec:9d:1c:fa:13:
5a:10:5d:13:fa:fa:bd:f6:9b:8b:63:93:b5:5b:b5:
2c:b4:c4:0f:ca:c8:3a:6a:15:e7:6b:71:eb:74:8c:
99:c9:ed:2c:eb:87:92:ca:1e:fc:8f:57:73:2b:da:
3c:49:25:14:73:9f:01:c3:e4:8f:40:39:19:d6:16:
27:ed:f6:d8:00:32:b6:03:49:4e:cc:8d:f5:12:1e:
df:2d:e5:5e:a5:60:48:6c:61:5e:8e:aa:4f:69:8c:
36:50:a2:b6:29:57:ab:11:3c:99:4e:2a:76:b0:51:
aa:66:b8:d2:f2:6d:a3:d3:e7:ef:d6:fb:53:96:35:
a0:c5:22:2e:50:a1:cc:52:68:06:19:b0:21:d3:c9:
39:4b:b6:f1:27:ae:4f:63:9e:bc:bd:b7:94:af:32:
c5:1a:bc:6b:47:3f:f9:1b:60:19:d1:8b:74:88:ed:
ea:4a:fb:20:e4:dd:40:4d:19:95:52:dc:1a:4a:01:
69:c5:3c:8c:a7:f1:b0:b1:87:d3:26:be:aa:cd:d1:
53:0a:c1:01:4d:ef:0c:55:5e:e2:60:5c:fc:e5:fe:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:87:20:6A:89:76:13:08:59:27:DA:AC:FE:3C:72:C8:4C:B7:AB
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e4:c2:d2:b7:14:53:6b:d4:d0:8a:06:28:99:d0:64:5b:c8:
fe:ad:f2:9a:2a:f8:91:ec:2c:5e:3c:f0:5f:6f:34:27:36:65:
fa:95:5c:74:e6:a8:eb:f8:d1:64:9f:c7:e3:d3:2a:b2:2b:03:
14:77:c3:b7:c4:dd:fc:32:bd:bc:d1:92:50:e2:22:5c:ee:d7:
e2:49:70:70:ff:03:3d:84:36:4f:c9:3b:a6:ad:99:b1:87:46:
9a:58:8b:0a:d1:f4:63:04:32:57:c5:bd:ce:72:e5:b1:02:f7:
a7:5d:16:1a:57:c7:1c:38:dd:aa:ba:8c:16:48:ae:f7:d3:37:
1e:4d:98:8f:ce:e5:57:f0:2d:8a:37:5b:34:4c:2b:ff:5d:44:
1a:4b:b6:07:7f:4e:af:55:50:5d:53:c8:03:0c:be:52:ac:12:
2e:c6:99:07:01:46:77:9a:b6:8c:64:26:e4:08:46:88:a4:25:
05:70:eb:6d:a0:f3:d9:27:ce:8b:fd:26:89:47:cd:fa:9d:0b:
66:3e:ca:26:76:69:18:d1:a3:b9:ed:fd:25:45:8e:51:b9:c2:
bf:0c:0d:eb:83:3b:4e:e1:2f:9d:e6:e7:d2:34:c5:f3:cd:13:
c4:8b:42:bc:1c:db:36:51:b4:6c:26:f5:13:f6:99:ca:1e:c6:
da:99:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client