Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File: ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier: zSTfBBb1pJOWOmuukpE35YkSkQbjvohTkqReUTNGDE8=
Subject key identifier: 38:7F:02:5E:65:33:83:EA:9A:84:20:4B:04:39:27:1A:49:D0:0C:DA
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer: /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial: 0194BC04F6905F287DE316BEB64E585BE4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number: 0F69
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 4Z83aeiL1qKhRZ2WNkILMOJ_sWw.roa (hash: n41nIQZg7HLjUhRFvbwLNJk7mnBYZCymPOk6XFqJF+8=)
2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: X/9+qU8JEV7/SsPt6ZypwNe9GHYcJn53/Kt+7Yy4rMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f6:90:5f:28:7d:e3:16:be:b6:4e:58:5b:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=387f025e653383ea9a84204b0439271a49d00cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:87:ef:4f:23:1d:c6:01:4d:72:f8:f0:42:
e7:1d:e9:a3:21:71:64:75:30:2b:4d:5e:39:bf:e5:
42:4a:1e:3f:e0:ad:6d:b2:d4:c7:9b:34:62:87:5a:
b4:b8:a9:e4:dc:92:12:93:1e:95:7f:f9:f9:f7:6e:
55:29:a7:e0:15:8d:69:a7:b5:22:bc:2d:e5:23:ec:
bc:1e:ac:56:02:8f:3f:12:0f:15:7a:ad:c2:97:c5:
ed:57:2a:48:27:73:c1:a0:4a:84:2c:36:aa:d7:ba:
24:c4:bb:a9:e3:47:7b:4d:44:83:88:0c:81:4c:6d:
02:5f:34:ae:29:46:53:3c:80:aa:eb:19:f1:9c:5d:
29:1d:ad:34:84:76:03:13:74:fb:0d:4e:69:34:85:
9b:05:f3:b9:5c:50:77:a0:9f:bf:5a:61:58:9b:44:
56:5a:3d:c2:ce:6a:5c:b3:9a:8e:92:14:f4:8c:4e:
4d:ec:88:12:19:52:44:92:ed:7f:6f:61:30:a3:e3:
37:d6:5c:a2:ae:a8:f6:6d:b5:0c:53:35:a6:30:6c:
b0:e0:04:a8:39:ea:ed:cd:69:b1:22:dd:59:43:93:
48:9d:b0:83:83:18:86:ce:d0:64:d5:ab:e5:e8:61:
c4:c0:18:08:ac:7c:c3:90:35:0d:b2:3c:b1:b0:c4:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:02:5E:65:33:83:EA:9A:84:20:4B:04:39:27:1A:49:D0:0C:DA
X509v3 Authority Key Identifier:
keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:09:fa:5e:4c:8a:b1:e3:52:41:a6:69:93:49:57:20:7b:66:
b7:91:0a:b1:94:6b:9d:ad:cf:38:15:38:36:bb:9e:19:21:28:
48:03:bc:60:f7:89:12:02:a9:ad:1e:d8:67:8f:d3:43:c8:9e:
81:2d:7a:6b:6d:27:e8:d2:0f:84:2b:eb:87:35:b3:d7:4f:ac:
be:6e:ac:49:77:ee:48:b5:77:78:9a:6c:be:c9:d4:bb:3e:f2:
1a:ce:2d:32:75:ac:54:57:06:9d:87:67:aa:21:15:a8:6b:25:
65:9d:3d:42:dc:94:44:ea:72:08:b4:ac:d9:40:ed:55:d9:3f:
5b:34:f8:b0:c3:aa:dd:ef:df:a4:48:21:17:52:43:a1:b7:d9:
cb:cc:48:cc:87:47:58:b8:53:e2:99:38:54:23:03:80:ad:10:
a3:46:02:b3:63:d9:a6:b9:bf:78:27:d9:0c:68:e7:96:7e:0d:
a8:b7:81:1d:72:b5:ee:cc:1d:ad:9d:c4:97:ff:e1:65:de:12:
16:ce:e9:45:3c:03:c7:8e:82:e4:7a:f0:b3:83:50:0e:5b:65:
e7:02:68:92:01:e1:03:99:79:c3:7b:31:a6:d3:26:00:88:d8:
4a:a8:68:4d:59:6e:77:8c:10:0c:f2:80:b5:f2:be:b7:25:6b:
e0:b3:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:29 2025 by rpki-client