Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
File: AlqBIsJH0--70vaoFKX2h0VBiN8.mft (raw, json)
Hash identifier: +4C4cFiKHSUhg0QKCDQ8m0OFLvqHhuKozIDBLfVR700=
Subject key identifier: 6F:77:FC:57:DF:51:66:04:4A:AD:54:D7:24:DD:2C:8D:D0:82:D6:E2
Authority key identifier: 02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
Certificate issuer: /CN=025a8122c247d3efbbd2f6a814a5f687454188df
Certificate serial: 0194BD179D36660E733DC0C537D69025D895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 8b2Sz4cL93cXk3-Io7s2vbwBznU.roa (hash: OdYsHSgXYM8f8BmJb0rgKjd3SquS1uJD7loVl2Lg/xI=)
2: AlqBIsJH0--70vaoFKX2h0VBiN8.crl (hash: 7luNGDnDlXqVQmIxHkGkWGx/Wxv7keLg5BCjYXEJ07M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:36:66:0e:73:3d:c0:c5:37:d6:90:25:d8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025a8122c247d3efbbd2f6a814a5f687454188df
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=6f77fc57df5166044aad54d724dd2c8dd082d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:a7:eb:99:04:a1:6a:46:27:87:2b:2b:74:
bc:bb:ac:b1:b2:6f:16:af:1f:65:f6:cc:46:71:83:
64:0b:f3:2e:a3:77:ba:56:e3:08:73:a9:c9:3b:5c:
53:c3:a2:cf:66:f4:1d:80:23:cf:97:33:ba:32:08:
2a:77:23:a5:42:aa:3f:9b:df:73:87:a3:4e:52:8e:
13:9e:6c:de:28:64:f0:fa:3f:2e:f3:db:c5:0c:2b:
3f:41:e6:0a:37:bc:4f:d6:71:43:ab:8b:cc:2c:e3:
3c:66:23:d7:9d:1f:43:83:b9:c5:ed:ca:86:78:c7:
a0:dc:ad:88:a5:5a:b6:7e:aa:ff:04:e0:54:66:18:
4d:3a:5a:34:0d:37:57:39:78:bf:71:8b:13:ed:9b:
3a:23:8b:b6:0e:09:eb:f2:90:d4:e3:8f:a9:f0:aa:
bc:85:29:a5:06:ed:3e:16:b8:1a:f2:9d:1d:f0:13:
63:f1:44:6a:3e:20:ee:ad:dc:e5:6d:d7:e2:3e:47:
6d:e2:df:8c:61:ca:fc:94:0d:f6:7f:06:4b:1f:6c:
66:c0:0b:94:d0:3d:da:f2:3c:71:06:59:c5:55:60:
72:94:44:3b:ca:fd:bf:09:e1:6a:f1:bc:2b:6c:fa:
b2:e2:b9:dd:de:77:d8:fd:71:f3:3e:16:5a:0b:ee:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:FC:57:DF:51:66:04:4A:AD:54:D7:24:DD:2C:8D:D0:82:D6:E2
X509v3 Authority Key Identifier:
keyid:02:5A:81:22:C2:47:D3:EF:BB:D2:F6:A8:14:A5:F6:87:45:41:88:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlqBIsJH0--70vaoFKX2h0VBiN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e2991a-db0f-4c3f-bc08-1b3e3595101b/1/AlqBIsJH0--70vaoFKX2h0VBiN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:5a:13:91:02:38:31:e1:e9:40:1c:2b:06:75:92:86:2b:
7d:70:3b:6c:52:51:43:57:b4:bf:62:f5:c0:01:86:4f:9a:2d:
7d:e1:4d:61:f4:79:58:db:9d:68:3b:32:c2:5f:e4:e6:46:56:
c6:74:ae:6e:8e:79:bf:c0:b4:f1:ec:89:13:1c:ea:e6:50:82:
b7:21:22:cd:5f:1b:d9:df:b1:96:6d:9c:19:12:9e:eb:55:82:
ba:9f:c9:41:96:1e:b4:f8:b8:55:75:5a:4d:37:3f:4a:dd:51:
f4:60:f3:f3:4f:92:6e:b9:b7:5b:e8:bd:54:bb:eb:63:07:96:
f8:ab:21:04:fe:4f:3d:e9:7c:4d:8b:0d:6e:0c:f9:b7:8c:de:
8b:ce:48:71:d4:27:46:0c:12:a7:19:12:20:5b:71:6e:4d:9a:
c9:b9:c6:0a:3f:72:44:ac:ef:33:82:ef:37:1e:76:fa:72:aa:
08:e8:0b:8c:2c:a6:20:fc:5d:74:e7:3d:3c:29:d0:5e:12:9d:
74:dd:ce:48:41:06:5e:0c:18:b3:d0:01:cb:fd:fc:f2:2e:ca:
f7:2f:21:f6:79:db:b7:ad:96:f6:be:f2:f6:ae:67:fb:45:62:
a3:fb:fc:a4:2e:d8:ae:28:a1:61:70:1b:39:cd:bc:01:2d:72:
40:5d:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:39 2025 by rpki-client