Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: JWA6kHFTJlXjXWeIWejgdbYBn2HptMSimV/FTM7kBQU=
Subject key identifier: 7C:00:9A:AF:A7:D2:64:0B:E6:F0:4B:49:B1:73:A2:7E:6B:C5:32:94
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 0194BD17B2F5C572B8B9CDC65139C4A6556C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 6E
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: n7IMt1wzWnSmws4SgB1ZOP2EcztFrOxVNErcGytUYLc=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:f5:c5:72:b8:b9:cd:c6:51:39:c4:a6:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=7c009aafa7d2640be6f04b49b173a27e6bc53294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:02:76:01:70:b1:a2:e2:b8:e2:51:2b:54:
90:9d:f8:58:a1:73:54:a0:e7:ef:48:b8:ac:83:29:
f4:86:b3:e8:07:21:1e:a0:d1:d8:64:3b:95:4b:19:
99:03:7f:bd:99:a9:0e:c2:8f:c4:85:49:62:b1:25:
b2:28:4d:58:c8:4b:d6:93:fe:a4:c9:16:27:55:c2:
0d:39:7d:d5:e0:69:16:49:37:b6:38:c4:44:4d:0d:
98:7f:8f:1f:83:a0:f1:dc:50:2d:e8:38:78:05:d1:
78:84:ff:cc:a2:44:b7:05:d4:c8:1d:bd:cb:23:2a:
a4:ae:f6:c2:f6:f5:18:d0:cf:44:2d:19:c0:a8:aa:
b3:15:1f:f1:cb:0c:b3:8e:d0:19:c1:35:0c:4b:3c:
41:0b:7b:2a:d7:61:e0:ed:8b:68:bd:26:cf:aa:4a:
d7:c5:a6:5e:6a:19:ad:fb:07:40:be:56:65:d2:05:
e1:5e:2f:f3:b9:58:c5:59:ea:87:82:2a:41:64:61:
d1:78:3b:8a:fb:8c:6f:07:71:1c:ad:24:7d:43:51:
85:2b:39:45:dc:38:d1:ab:19:5f:17:8e:d0:64:3f:
93:a0:43:28:57:c7:ef:6e:01:d2:b0:73:74:65:37:
3a:ad:bb:4e:14:ad:e4:ba:b0:34:69:dd:8b:62:ac:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:9A:AF:A7:D2:64:0B:E6:F0:4B:49:B1:73:A2:7E:6B:C5:32:94
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:3a:70:f0:86:59:bd:3e:6b:94:51:13:1d:c0:28:fe:c0:
69:bf:a1:d3:18:84:c7:71:e3:8e:da:1f:9c:40:14:55:65:96:
21:6e:46:b2:f9:f0:c6:68:52:16:7b:64:a7:a4:e9:e7:b2:fa:
fa:94:e2:f7:0b:15:02:f1:bf:83:00:d4:27:94:35:d2:e8:a3:
9e:60:af:23:3d:2a:19:60:c1:bf:40:44:bf:06:66:9e:32:74:
91:1b:48:d8:48:0a:23:cb:16:26:6c:a7:ff:20:f3:78:ba:b2:
60:dc:af:42:69:03:91:11:bc:50:29:70:9e:72:14:72:91:09:
68:e6:58:11:08:3b:e8:9c:a6:48:bf:cd:c9:2d:31:31:87:96:
67:95:fe:18:ab:7f:0e:26:91:89:bd:2a:54:7a:1d:b0:21:06:
bc:74:46:48:99:5a:db:76:0d:9c:02:4b:f7:bd:98:a1:de:ac:
a0:50:c7:ef:87:d9:fa:b0:47:0d:6d:74:b3:be:02:71:3c:9e:
54:30:24:ba:c1:47:cb:0a:0e:af:af:25:fd:88:25:fe:e1:b5:
dc:3d:1e:28:96:41:e2:6d:ed:e2:2e:59:1d:15:72:a3:4e:0d:
fa:24:3a:7c:9b:f7:23:59:8e:f0:20:3b:7a:7a:2b:e0:a5:3c:
f1:95:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:29 2025 by rpki-client