Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json)
Hash identifier: AMDP9d8uZbELM2ZzvJr0JJ8E+5KZgiLXxLVbCeZwxyM=
Subject key identifier: A9:34:DF:48:49:7D:3D:E3:7B:4C:6C:BC:49:12:B8:46:2F:FC:0B:2B
Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Certificate serial: 0194BD853D699BA4E9E8AE8F21E2C321FA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
Manifest number: 0314
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: A2QEf71RdaTv7-Rw5IFhLuGQC4U.roa (hash: Z1OLFVFoQ+NSvR47C8hJwPMxNvIVBkBVq/jOlyMfUUc=)
2: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: xhZMZsjPzdI445rP6S2rbZeiWFFvmFoKZrqyQ70itTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3d:69:9b:a4:e9:e8:ae:8f:21:e2:c3:21:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=a934df48497d3de37b4c6cbc4912b8462ffc0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:5c:69:65:dc:93:51:ff:7a:02:ed:a9:64:
b0:a9:43:24:5e:8c:5f:be:36:6a:5b:a1:25:21:c4:
10:1e:48:e9:96:6d:4e:84:65:30:b7:c4:8e:5a:7f:
1c:71:a8:a1:5c:11:fc:69:ab:7c:1a:cb:d8:6d:32:
e6:11:40:83:94:e6:43:a0:5e:6b:81:6c:3e:45:09:
e2:b7:cb:99:07:46:0e:0a:59:9c:69:23:ac:a2:96:
17:ba:e1:ad:0e:29:1e:3a:d3:95:6d:fc:ae:9a:eb:
56:8c:71:43:7f:83:a7:15:8e:0c:d5:76:88:2c:37:
a7:17:25:4e:51:33:91:35:00:f1:0f:98:30:4b:36:
54:2e:49:d2:98:32:85:25:65:21:8f:96:76:86:49:
08:b9:a9:88:09:b1:2e:b0:46:2b:e3:b1:e6:14:83:
57:fa:8e:25:ef:5b:11:3a:b2:f5:24:a9:e9:69:27:
8f:fc:fe:f0:61:b8:e6:d3:a4:9d:56:e7:fb:8e:5c:
a1:8e:5e:8b:ef:5a:bf:04:25:67:b7:42:ca:0f:14:
bb:5a:2e:f0:c9:52:8a:1b:1e:39:fc:d0:fb:99:5d:
bf:0c:2d:7e:5b:31:b5:fb:18:60:bc:d3:41:6b:f0:
a2:fd:47:54:bc:db:a3:4d:85:dd:81:b0:e4:f6:f8:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:DF:48:49:7D:3D:E3:7B:4C:6C:BC:49:12:B8:46:2F:FC:0B:2B
X509v3 Authority Key Identifier:
keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5a:3b:07:eb:dd:fb:d3:9d:56:59:1c:8a:74:4b:11:24:85:
a7:5c:a5:98:9b:fa:83:94:b1:d4:9b:fa:47:c9:46:ec:12:46:
7c:6d:a6:84:45:30:61:6b:0f:3f:f9:ae:da:ab:53:d6:b8:f2:
08:58:7f:21:5e:ef:f4:e9:11:cb:ed:16:c6:df:80:c9:a7:e1:
b5:e1:cd:c0:44:6f:44:24:df:a3:dd:39:6e:cc:18:ca:41:7d:
0c:41:e2:ee:33:b8:a8:f9:81:34:c7:af:86:dc:65:fc:70:6a:
86:db:5f:f0:04:92:45:d9:d0:b5:b3:fb:b6:45:f8:c5:9f:72:
68:06:65:76:84:6b:57:f6:f6:0a:dc:b8:00:cf:54:53:67:af:
c5:ba:98:d1:ad:c6:d8:de:b9:51:bb:5a:e3:65:02:58:82:a0:
39:77:9f:bd:93:fb:6b:38:13:e0:7e:c3:72:21:9d:c4:bf:dc:
5b:28:a3:43:23:4d:fe:c1:f6:76:3e:f3:da:8d:76:a3:b8:b7:
2f:60:d7:c7:01:9a:52:52:26:f2:09:43:d7:69:92:3b:65:e6:
0c:c7:47:53:ec:9e:19:b9:68:37:92:43:09:78:0d:32:a7:7a:
6c:fa:db:c8:f2:80:b7:47:08:05:61:9d:d1:97:29:42:c2:d5:
08:e2:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:19 2025 by rpki-client