Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: mDI/P7BhjwUF3ialqzLz0Z344ecDNwocqL8KgmviFZo=
Subject key identifier: C1:E7:AE:47:08:F2:CD:BB:5B:1F:36:8D:11:EB:3C:B8:20:02:62:57
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0194BD176FDABCF0795ED6D46AFF9C6AF396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: XOyfaOyZIgOyTa2sf5Go9/QhU4KQ87QvWUi9//yDECk=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6f:da:bc:f0:79:5e:d6:d4:6a:ff:9c:6a:f3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=c1e7ae4708f2cdbb5b1f368d11eb3cb820026257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:7a:40:fa:e8:17:3b:71:20:9e:63:07:44:
5e:46:fd:7d:ef:d2:bf:d1:be:1b:8d:bc:7b:f6:86:
87:0a:eb:e3:29:de:45:42:d3:f8:5e:5f:e5:e2:82:
ec:ed:80:ac:2b:dc:19:63:ad:ed:e5:fa:3c:05:99:
ab:ed:08:3e:d7:3f:f2:65:da:6e:9a:dd:6b:85:49:
cd:19:6b:15:96:33:15:68:66:f3:2d:32:37:e6:3c:
df:c8:3d:07:c1:f3:a2:20:e3:9f:36:00:89:51:92:
d6:71:d0:e5:26:f3:81:2a:81:38:3e:ee:86:d2:7b:
30:a4:62:47:5d:1f:8d:73:82:61:83:54:33:a7:6b:
2a:03:10:e4:7d:56:e4:05:60:0f:ea:90:67:76:ca:
9e:5e:14:07:bb:7e:6f:33:ac:62:90:a3:3f:54:11:
72:ba:93:8d:c3:b8:14:bb:fc:3b:e8:c5:d3:3d:0a:
6b:9d:ea:00:08:e7:a4:67:5d:6a:38:93:ce:a1:35:
36:ae:f8:6c:dc:50:36:82:92:a9:25:ed:2e:a9:cb:
66:d6:2d:4e:97:fd:d8:e3:ac:3a:2f:c7:66:a1:07:
6a:1c:eb:ae:d7:ce:06:77:80:89:91:c8:96:86:95:
28:93:98:22:0f:68:03:4e:c4:9f:99:dc:52:a0:35:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E7:AE:47:08:F2:CD:BB:5B:1F:36:8D:11:EB:3C:B8:20:02:62:57
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:92:2f:38:41:d5:df:8f:35:4f:b2:fa:c1:08:2c:40:66:19:
2d:bd:40:e9:5c:a5:2f:45:4d:53:cb:d4:f3:60:65:8e:7d:6b:
17:32:3a:68:15:5c:2a:0e:78:df:99:58:80:a4:05:11:27:a8:
8a:e6:2e:29:ab:54:7a:5a:05:6d:bf:5a:86:40:0f:ac:e2:37:
81:93:5b:aa:84:4e:db:e7:bc:8e:cb:01:94:df:b1:37:f2:42:
b7:c8:66:e4:a2:ed:d6:d2:61:44:d0:fe:e6:28:ec:8b:8a:e8:
71:67:d5:6d:64:cc:0b:24:cc:a7:64:64:34:69:48:35:b0:2d:
c3:75:b2:b4:af:a6:7b:f8:e6:73:bd:73:13:da:ab:40:e8:1e:
8b:67:7f:44:08:75:11:6e:d2:73:db:ea:9c:33:37:c0:c2:52:
b8:b8:e6:8b:87:e3:86:45:26:01:34:d4:72:8e:d3:90:e7:5c:
50:bb:81:0b:28:83:20:bb:ad:49:0a:99:92:bb:3d:b6:1b:43:
6b:72:60:31:bc:53:5f:a7:09:35:25:88:48:66:f6:b8:e5:02:
cf:6a:26:7f:5f:fc:c5:b4:21:45:0d:25:ec:25:f1:51:d7:0b:
38:fd:e9:c9:92:82:9a:5b:56:60:94:63:c7:88:8f:3d:99:55:
63:4a:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:22 2025 by rpki-client