Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: llcds408567pNmUTk7TNEDUV18XtnaugMYO5lfq29ww=
Subject key identifier: C2:4C:28:58:5E:DF:92:5E:17:F9:25:0A:D4:F6:EC:A0:F0:B4:6A:F6
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0194BC0527A441E198EA70BDAB138E357558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0DAB
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: qTesBdVqgunukhca/Dc0jy/CdDciM49XQNIbD+zv3S8=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:a4:41:e1:98:ea:70:bd:ab:13:8e:35:75:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=c24c28585edf925e17f9250ad4f6eca0f0b46af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:2a:97:72:1f:9d:19:d4:53:83:23:40:8f:
1d:4d:a1:01:c5:ca:61:c4:36:f4:b5:b5:a9:b5:29:
c0:2c:d0:b9:f3:1e:f7:c4:5b:a9:61:b6:47:a0:24:
02:53:0c:cb:cf:4b:7a:f8:b8:8e:8d:d1:28:7d:94:
e6:4b:75:8e:3d:a5:d7:01:08:14:bc:d9:cb:9f:38:
83:33:88:8b:2e:fa:58:43:80:32:47:d1:d8:1a:2d:
03:19:5e:69:fa:d0:19:96:2b:49:06:3a:a0:52:8a:
2a:2a:00:b0:9f:33:5f:b1:51:af:a8:a8:5c:25:30:
eb:e6:92:ff:d9:c8:5d:2d:e4:04:bd:20:a3:26:5e:
d6:61:71:29:7e:d2:8a:5f:a5:b4:0f:22:1d:6c:2a:
03:ad:21:64:b0:de:91:b5:54:f9:c2:25:8d:20:63:
a7:18:9d:4b:9a:f5:8e:1f:6c:b9:41:32:4b:33:7e:
80:6c:5d:1d:bd:1e:30:cf:b3:0c:0d:eb:04:2f:bf:
83:ce:93:76:eb:1e:f4:f5:3b:fe:b5:f0:12:de:8d:
a2:b8:bc:b8:82:1c:5d:d6:6b:83:75:69:9d:e9:20:
a3:4f:44:fe:38:0f:6c:35:aa:36:02:a8:ad:39:18:
4a:75:5a:ca:83:43:e5:97:27:57:45:a7:b2:07:9c:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:28:58:5E:DF:92:5E:17:F9:25:0A:D4:F6:EC:A0:F0:B4:6A:F6
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:07:66:88:07:b3:97:23:ba:4f:25:14:50:bb:25:dd:f0:
5f:89:9b:71:5c:07:ef:37:a1:26:3e:81:20:14:d0:80:bb:49:
6e:7e:ed:82:a3:b3:1e:53:61:6c:9e:53:02:fe:8f:ab:50:f8:
c0:d6:c7:4c:5d:d8:b5:41:55:53:63:e3:8d:93:c5:48:8b:4a:
2a:45:07:d8:6f:be:7c:85:7d:12:42:72:07:99:de:ef:ce:b1:
91:de:cb:b0:ab:87:94:c3:8d:e8:35:67:f6:02:64:74:d8:81:
cb:61:1d:5c:e6:10:26:ef:cc:2c:b6:c3:d3:3c:77:3f:83:1c:
3b:19:03:3d:de:b7:7a:1c:6c:3f:07:28:85:98:ff:9f:2d:0b:
95:bf:7c:1a:cb:fd:f2:9f:02:b7:5f:4c:d9:e5:d2:84:c4:11:
e3:94:6e:8b:56:42:53:5d:ba:e2:a1:4d:18:80:c0:e5:d1:05:
09:ed:35:c4:7c:a8:51:c2:27:e6:dc:c1:6f:78:de:7a:51:e2:
ee:2e:d0:c3:2c:b3:8c:9f:18:a1:56:7c:0d:47:b2:52:3a:27:
6b:d7:66:59:9a:11:82:ef:9a:6f:b7:0d:63:2a:6f:7f:9b:0f:
0b:75:75:6d:26:39:e0:be:1b:cb:a6:b0:a1:b0:07:e4:e8:b9:
dd:4a:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:11:02 2025 by rpki-client