Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: 17iInAumTasNnCczxdKNTX/SE9lSLdyPLvz+keO8cr8=
Subject key identifier: 1D:5F:D6:1B:60:AE:C7:0C:EA:7E:32:92:57:2E:06:08:BD:4D:AE:63
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0194BC3BEE1417148874B1848C914880833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 83
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: oeU64uEqU4f2K1AKqAZ2cpK+UFp4KAmnDassa0lBC6s=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:14:17:14:88:74:b1:84:8c:91:48:80:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=1d5fd61b60aec70cea7e3292572e0608bd4dae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:c4:9b:c4:96:48:51:6d:23:b6:89:4c:2c:
3e:ff:f5:25:e6:8e:78:c0:b4:6f:f9:fc:3a:d5:23:
88:72:ad:7c:70:5a:bf:32:c3:35:04:26:5e:e8:ec:
5c:85:1a:db:29:b3:2e:97:4a:f3:0a:ab:c8:26:38:
87:e8:55:f5:1b:45:79:7a:e4:61:c9:74:6e:cc:27:
9e:c8:77:1f:8b:14:4b:fb:6f:c2:49:f9:35:64:68:
22:cd:9b:25:e9:3c:70:17:68:c0:1d:2a:d0:ec:9d:
75:66:79:16:bf:8d:36:e3:7f:83:1b:97:40:2d:34:
50:f1:de:9f:22:7a:03:5b:8d:a5:fb:4a:94:cf:27:
b7:07:ff:e2:5c:aa:c0:60:92:ac:e9:ff:38:02:70:
34:2f:21:58:05:53:65:c4:d4:76:2f:f4:b4:0b:91:
95:29:ad:ea:e7:87:4b:67:8d:b1:8a:ec:b0:cc:48:
63:be:eb:ed:70:6d:9f:2e:d1:60:35:3e:a7:a2:67:
92:84:7c:20:09:56:e9:2c:57:30:e3:8f:44:55:6b:
0a:5e:39:77:3d:ab:60:10:95:e1:48:fb:df:2c:2c:
8f:7d:39:a1:33:cb:be:bd:ef:64:51:b5:15:01:61:
8d:61:83:cf:fc:20:9e:1e:d8:14:8a:cd:de:60:d1:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5F:D6:1B:60:AE:C7:0C:EA:7E:32:92:57:2E:06:08:BD:4D:AE:63
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3d:b4:26:80:4f:8a:fd:ba:c2:a1:e2:23:06:7b:d1:09:62:
68:2b:5a:59:ac:8b:5a:13:02:57:1b:9e:f4:fb:20:3f:aa:7b:
0f:45:58:fb:ff:c8:99:67:6f:00:77:5d:d3:bf:2e:95:13:5b:
69:e4:d5:d8:0e:8f:23:96:98:82:aa:a8:e9:a7:39:fb:32:22:
87:7b:04:42:e3:c5:4a:6e:b5:51:d8:60:80:97:97:be:53:df:
20:cd:f2:b3:09:a7:e2:c4:0a:75:a7:b4:45:d5:3f:18:37:3a:
f3:50:9f:b7:d3:e2:ad:84:53:cf:c8:e4:a5:f9:d0:e4:6b:71:
29:72:55:df:63:df:5e:b0:68:80:67:4f:c6:63:96:4a:a8:33:
eb:dc:c2:8d:b7:fa:49:9e:6d:12:33:11:0b:d2:13:27:d7:9f:
83:62:4c:3f:23:2d:6d:38:1e:ec:0a:15:88:b9:2f:51:05:2f:
c9:1f:8a:12:3f:4b:2e:ea:b9:f7:db:e4:6b:20:71:35:33:6f:
86:c4:9a:a8:26:12:6e:47:35:bb:dd:ea:b1:3d:66:d7:69:d3:
61:9f:7a:90:91:1b:8d:d4:9e:b2:7c:a8:1c:e5:63:52:fe:e0:
9b:63:4b:d2:48:f3:04:98:85:c6:29:98:c8:22:3c:d5:37:92:
3b:7a:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:31 2025 by rpki-client