Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json)
Hash identifier: VNN8AQ3XmLCx3THvS77UC0KoAbq2rmVRMxFm9wl2E6c=
Subject key identifier: 15:FB:4E:75:1A:ED:7E:5B:AD:6F:A1:84:93:2C:9F:75:4F:BD:9E:40
Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Certificate serial: 0194BC3BF63B7C88FE3291E6F0CD409C103C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
Manifest number: 01ED
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: 086dXaEjl5AcqO2kmD9zqEp447tnR5CUXhL7jrdPSAM=)
2: ddFSz5BHQOYnaU-gHg3YrxEkhJw.roa (hash: adygbfjd+yjXvUTx2yOuoRyVaLmd0xsTX9kZsgRNyYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f6:3b:7c:88:fe:32:91:e6:f0:cd:40:9c:10:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=15fb4e751aed7e5bad6fa184932c9f754fbd9e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:f5:68:66:ac:25:4c:d3:a7:ef:f5:d4:9e:
e5:17:f7:3c:08:db:d2:e0:f5:c8:33:ba:24:15:7d:
dd:51:3d:38:82:ad:02:02:2c:d8:4b:70:e4:d7:a7:
fc:0d:62:38:1f:27:54:a3:cd:d8:d3:a6:fd:ef:3b:
a3:bd:0f:c4:ea:9f:a5:de:db:fa:87:ff:b1:60:14:
e0:8f:eb:1a:e7:fd:21:47:82:8e:c6:84:71:88:72:
88:5c:b6:64:b8:25:95:b0:b3:48:7f:1e:3e:f1:0f:
22:b0:03:e7:a0:60:d7:2f:0b:e0:61:1b:dd:a5:28:
0f:9d:e9:4a:cf:48:30:48:34:39:1d:7e:09:d8:14:
bc:3c:4f:e7:5d:51:a1:24:ad:e0:28:0c:98:69:69:
f5:c9:71:ce:e0:9f:6e:d1:ab:0e:8e:9e:dd:e2:c1:
a8:e2:7b:a5:a3:74:d8:eb:1a:3c:30:d9:54:ba:30:
5d:bf:5b:10:16:9d:18:d4:8a:f0:20:fb:23:e1:8f:
c1:01:78:d8:46:5d:37:89:f1:f9:3e:55:92:05:0c:
dd:83:af:fc:83:3b:5b:58:eb:56:81:f9:89:d2:47:
02:04:18:2b:f8:e5:17:a6:23:aa:f8:0b:ae:5e:33:
ed:95:9c:18:87:a6:6e:80:9b:ca:fd:d2:17:00:d0:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:4E:75:1A:ED:7E:5B:AD:6F:A1:84:93:2C:9F:75:4F:BD:9E:40
X509v3 Authority Key Identifier:
keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:92:f1:a6:9d:16:c7:14:26:d7:d7:fa:de:d0:80:b8:de:f8:
f3:bc:12:be:72:e2:4c:68:cf:57:67:2d:98:63:eb:ff:30:ea:
a4:ee:c1:4e:43:f8:0a:0a:6d:a3:a0:fc:bb:3d:e2:59:2f:b2:
a1:05:17:dc:67:0a:41:63:ed:70:5b:cf:e0:63:60:c4:c9:15:
64:17:0a:dc:2d:5b:c4:21:48:97:7a:02:d3:6f:0a:78:ad:bb:
b6:0d:0e:66:45:42:bb:5b:5d:5c:04:d1:cc:8a:12:05:8a:24:
f5:4f:ff:ec:e0:f0:07:d0:08:fe:de:70:91:27:ef:af:e1:fc:
67:be:d0:0f:c1:76:97:38:81:bb:6d:a7:eb:e3:73:bc:77:f6:
8b:ff:6b:25:ac:9a:2c:44:cf:40:4a:ec:49:a4:53:23:ea:e4:
42:1c:60:bb:8b:00:04:5d:17:83:7a:50:01:93:1b:8c:d6:08:
66:d8:8c:be:01:af:2e:c4:d5:14:97:d8:b8:33:ca:3c:02:25:
20:51:4e:64:ec:e8:78:5e:1e:ee:cb:3a:1b:d3:80:0a:4c:c3:
14:21:35:04:42:d0:74:99:3e:85:18:81:54:e0:4c:76:a8:cc:
28:03:72:5b:4e:88:c7:89:f6:6a:c3:e4:0c:90:bb:42:a0:36:
f5:59:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:59 2025 by rpki-client