Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
File: aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft (raw, json)
Hash identifier: C4ME+PHUBfwfGTmPICbBJFuum56uDEfSTOdxxZF4nl8=
Subject key identifier: F2:08:3F:6D:DD:EA:A7:0B:CA:75:E9:C1:12:51:5D:4A:66:F8:8F:F2
Authority key identifier: 69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
Certificate issuer: /CN=695dce5e37a862538a0f66883de206ffb7c93b69
Certificate serial: 0194BD4E70A780677F889B8DBB9C8174FF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
Manifest number: 0468
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl (hash: n2Zt/FfdfKwFXVW47Y8GQuX9kgaTm03r9/5As1r5Phk=)
2: hnTM8e9DDp88O_jCAHz8InVW_vE.roa (hash: 8skhoEZiI2jfYQ4DDQgvqEaBRoMspiQzmuxF61YcMEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:a7:80:67:7f:88:9b:8d:bb:9c:81:74:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695dce5e37a862538a0f66883de206ffb7c93b69
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=f2083f6dddeaa70bca75e9c112515d4a66f88ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:63:5b:48:5f:be:68:a0:c9:ab:08:a4:76:
5a:6d:1e:f3:79:cb:13:1e:37:ff:b8:58:71:0e:c6:
d9:5b:f4:93:16:5e:b6:ee:37:81:43:68:44:2f:ac:
20:d1:15:ea:6c:34:e7:6a:71:d9:a1:30:fa:59:7b:
a9:3a:21:d0:06:48:df:a6:c4:8f:e2:00:b4:1e:88:
9a:49:a8:f2:c1:93:68:92:e2:e7:37:17:6a:ec:3c:
f4:5d:b6:60:ff:a1:0a:d4:17:74:a2:97:ba:b6:0a:
4f:54:63:35:e5:5b:d2:17:95:56:c2:4f:a9:c3:06:
8e:50:1c:10:42:25:20:9a:d2:bf:59:5d:63:45:6a:
a4:7d:c4:91:e8:ee:6d:9a:ef:da:b4:70:23:bf:aa:
3f:a4:73:f5:ae:c1:44:16:c8:a9:ba:ef:05:49:c0:
2a:d0:97:5e:44:6d:6f:1c:93:f6:5c:1b:db:3a:13:
85:36:90:82:a8:98:f4:76:1f:3d:7f:1c:e8:dd:49:
13:00:43:2a:d5:32:7c:b1:79:11:d3:45:d4:13:9a:
2d:06:58:20:55:de:ff:87:68:cc:a2:d2:66:c9:99:
a4:40:a0:cc:be:3d:92:d4:59:fe:6c:67:f1:c4:4c:
b8:de:d8:78:3d:d6:fe:a3:8b:2e:68:20:8c:75:d6:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:3F:6D:DD:EA:A7:0B:CA:75:E9:C1:12:51:5D:4A:66:F8:8F:F2
X509v3 Authority Key Identifier:
keyid:69:5D:CE:5E:37:A8:62:53:8A:0F:66:88:3D:E2:06:FF:B7:C9:3B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aV3OXjeoYlOKD2aIPeIG_7fJO2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/716911-30de-4b74-959b-017dee452ec4/1/aV3OXjeoYlOKD2aIPeIG_7fJO2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:7c:f2:7d:e3:af:a2:19:f1:23:88:0f:a9:9e:89:7f:97:
ba:1f:b3:ac:1c:71:44:39:c2:5a:14:76:dc:d8:c3:fc:53:4a:
2b:ef:f0:fb:9d:28:64:2b:61:b8:eb:98:8c:79:16:7a:3c:d7:
df:c5:88:97:cf:bf:db:b9:99:e3:98:22:ae:24:57:0f:fc:a1:
7b:75:43:b9:87:3c:21:0f:10:36:fc:35:a2:63:26:6a:75:31:
0f:af:d3:02:bc:2b:0d:95:d8:9d:2c:4b:30:46:54:5d:de:58:
ff:b5:2b:22:72:b3:b6:71:c4:72:fa:93:87:48:57:d7:89:c7:
12:9d:58:a0:86:8f:f7:5a:aa:44:d8:ba:aa:16:83:ac:50:42:
3a:5a:bc:85:34:9f:9a:11:87:c7:bc:be:43:9c:e4:27:d5:73:
7c:df:b0:9d:21:6e:ee:e5:41:e9:5b:df:e6:cb:74:80:a8:ff:
c6:83:12:d5:fd:88:ce:56:49:37:df:d0:3e:f7:5f:38:bb:43:
cb:36:aa:ff:f4:cb:c5:b6:a4:34:29:ae:e2:2f:3d:24:38:84:
ae:0a:db:2f:98:ad:b3:4e:70:cf:d1:f8:32:29:1d:45:b0:2b:
c4:53:1c:f6:f3:ba:6e:dd:51:92:2e:48:c6:c9:d3:0f:b3:06:
ae:f6:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:07 2025 by rpki-client