Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: m4edLjsxi7+5ADmqjyBdeqsEC9Pkp9MgEUkUUnflYD0=
Subject key identifier: AF:72:68:8F:37:BF:92:81:5D:10:AC:24:8D:8F:74:DF:88:AD:9A:A0
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 0194BCAA2AE741A267D3E011101A9587593E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 4S3NHNybU78JTRi23dDuFkSY+mGZ3Faugeo+CJ+2FJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:e7:41:a2:67:d3:e0:11:10:1a:95:87:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=af72688f37bf92815d10ac248d8f74df88ad9aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:6e:20:35:f1:63:46:f4:3a:4c:2a:71:cf:
90:3d:9d:43:b8:b5:bf:51:de:1f:5c:d7:93:c7:b6:
0d:52:6d:59:cd:73:65:95:31:90:14:48:7b:fe:a6:
ad:a6:5b:33:f5:59:42:db:d0:89:65:54:53:43:59:
78:14:a9:70:4a:01:73:73:fc:2c:d3:50:af:ab:8b:
60:b5:97:e4:74:17:a0:15:76:1e:b8:27:59:ec:5a:
2e:38:e0:8a:6d:b1:51:22:db:70:ec:db:45:76:31:
74:a8:5c:8c:66:5c:6f:8d:db:94:91:b3:fa:74:37:
b5:33:00:51:31:be:8d:b1:8c:70:25:9e:fd:b0:22:
f4:c1:00:c9:22:57:56:a5:6a:47:f9:c1:59:51:a4:
2f:6f:3f:93:0e:ef:97:b2:ff:ff:c6:ae:7a:d1:0c:
78:b5:8f:1d:49:78:02:5b:70:01:68:92:b7:13:7b:
0d:88:29:3e:40:b9:31:09:f0:7b:8f:00:de:7e:3a:
df:d6:70:e4:ee:1f:a0:d7:a2:7c:5a:01:7c:94:28:
ce:07:ca:3f:ce:ac:66:f5:6b:bd:ca:5c:d2:09:c3:
98:6f:4e:6d:78:82:d1:b3:4d:9c:f0:fc:4b:f8:9a:
c4:e5:5d:fe:3e:0a:73:90:23:90:03:86:67:7b:63:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:68:8F:37:BF:92:81:5D:10:AC:24:8D:8F:74:DF:88:AD:9A:A0
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5d:97:04:49:63:b2:60:69:22:12:92:1e:ec:3e:63:76:b6:
c1:09:45:44:de:7c:b5:d7:5e:ac:5d:56:51:91:ae:54:5f:98:
21:e5:d5:8d:10:fa:1c:55:31:71:f0:52:6a:e2:6b:36:8a:43:
eb:79:0c:70:a7:29:45:e8:99:d2:5e:20:b2:04:b1:3d:ea:c0:
d0:69:11:d9:6d:62:2c:1a:ad:65:9f:71:b9:38:49:c7:9f:ee:
3b:b3:f8:7a:43:dd:7b:70:41:bc:99:66:d8:7a:b7:2f:88:40:
5f:34:b7:5e:06:4f:1b:e8:f3:ef:1b:12:a6:92:85:01:58:55:
98:da:28:1f:57:80:15:a8:db:36:ce:c0:c5:ab:13:99:77:b6:
19:85:b0:e1:31:8e:8c:ad:1c:6e:95:46:a7:79:57:7b:b9:10:
74:0c:ff:ec:93:75:10:90:4b:d0:32:a6:c3:e5:1f:42:44:c4:
aa:72:94:db:bb:4c:ae:a4:98:0e:fb:18:81:e2:7a:3f:f9:fd:
c7:75:17:f3:c5:0d:ea:e3:79:11:db:e0:d6:57:83:65:c4:de:
4a:73:38:2c:7d:d4:d6:2c:7e:24:5e:bd:6c:0a:c6:3d:61:84:
73:3e:09:25:38:4f:2d:69:69:f0:b9:b8:e3:4e:0c:6c:56:c3:
52:94:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:16 2025 by rpki-client