Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
File: aIt13GcpXVhht31RoCEYtg3FWGg.mft (raw, json)
Hash identifier: vzFp6LjydEgAK/hfRwjNmtO0vP6rIAQPuBulIc7Nibg=
Subject key identifier: FD:DE:87:DC:B0:E3:0C:FF:4A:A2:DA:BF:A0:DC:D9:87:03:9B:02:FE
Authority key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Certificate issuer: /CN=688b75dc67295d5861b77d51a02118b60dc55868
Certificate serial: 0194BC72EE2F53C9DE0EAF1D880F79502BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
Manifest number: 0B34
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: ArfVzV_ad27WSg6MSNAJVOVO4Jk.roa (hash: 7YOwLzYn+04mEiM6zjtu45GNMFpON/tmtRVeglwvQWQ=)
2: aIt13GcpXVhht31RoCEYtg3FWGg.crl (hash: POVfRsBQEvvvOwnu1eNKX4oG7q2aBc0dTS8Qem6EFsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:2f:53:c9:de:0e:af:1d:88:0f:79:50:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688b75dc67295d5861b77d51a02118b60dc55868
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=fdde87dcb0e30cff4aa2dabfa0dcd987039b02fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:78:4b:47:b8:30:82:a9:31:de:b8:a5:ed:
71:3f:9e:d1:54:de:7b:14:80:66:dd:a1:63:57:98:
7f:54:f8:d3:39:d5:6b:b8:3b:fa:c0:92:04:bd:21:
b3:8f:9f:69:43:8d:f4:11:62:2c:66:b9:9b:c6:5a:
a2:42:87:b3:c6:6f:df:ca:47:87:06:59:45:32:b4:
5b:e0:ec:2f:65:f3:06:09:09:c2:89:a2:47:0a:bb:
3d:93:fb:40:d9:3e:cd:e7:c0:1b:e9:bc:a6:b1:fb:
ec:94:88:d6:f0:5f:6b:6c:27:b2:c9:bd:71:08:6d:
ae:c0:69:72:de:53:cc:85:3a:ec:60:d2:18:92:b7:
40:8b:5c:9a:28:50:a2:6a:19:14:0b:86:f5:bd:92:
5e:b0:af:98:7e:62:a2:35:32:6b:e5:f2:e9:4a:d7:
ad:76:6a:3d:22:d9:28:65:63:c6:b2:49:fa:d4:82:
a4:85:b2:f6:fd:a4:ae:7f:46:f3:b4:5a:80:46:a1:
ab:49:95:87:4b:e9:09:96:0f:d0:75:73:7e:d1:bb:
08:e0:82:98:67:bd:07:7b:b9:61:b1:93:bf:c1:1b:
a0:63:9d:4f:87:8d:a6:28:9c:c4:56:c2:83:db:fa:
32:97:a8:91:5d:a4:03:76:79:3c:4f:f6:eb:4f:d7:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:87:DC:B0:E3:0C:FF:4A:A2:DA:BF:A0:DC:D9:87:03:9B:02:FE
X509v3 Authority Key Identifier:
keyid:68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0a:db:54:aa:b5:cf:de:fa:42:0e:be:36:ab:de:5b:82:8f:
9f:ce:3b:4e:ed:35:c7:aa:e4:16:dc:11:3b:ea:e7:04:ab:ad:
f4:2c:e3:3e:72:dc:9e:5b:da:d7:e7:80:58:48:3b:80:f3:2f:
c8:11:2c:e5:b6:ac:3d:8f:ad:82:08:a0:25:10:d9:e0:e5:88:
9b:4e:a6:12:f1:73:94:c2:81:48:2d:fc:84:81:14:ce:fc:8b:
e3:c0:34:85:62:02:6f:bf:c4:34:76:37:da:d3:7a:19:82:fe:
84:90:93:6a:d6:23:5e:a3:dc:d5:0a:9d:a0:73:cd:58:2d:77:
7a:12:b0:f7:04:6f:dd:f0:db:e3:f1:d4:f8:35:81:79:79:f6:
12:46:7e:46:2b:43:eb:71:cd:34:2a:8e:a3:c3:14:e1:e9:5a:
05:0b:99:b2:44:ff:23:db:1a:fd:88:1f:99:81:6b:c5:7d:23:
32:ca:d9:45:87:3b:39:84:ca:20:7f:35:58:9f:39:af:a5:b4:
ac:f2:4c:1a:39:85:d7:53:7d:6d:f2:38:9e:ec:eb:7b:89:01:
32:8d:b8:8b:f9:fe:e7:10:56:b1:66:a3:3d:ff:5c:37:fa:3f:
1c:68:7a:85:4b:da:9e:a6:e8:a6:be:e2:1e:6e:81:01:73:28:
46:38:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:20 2025 by rpki-client