Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: we9NX8ZiklX+/8sq+8vQEt1zdP8ZJm4VlxH18+He2Yw=
Subject key identifier: 80:9B:F9:64:89:5E:C2:07:B5:F1:EE:09:E1:7F:8C:35:E6:E2:0E:9B
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 0194BBCE47160E5985776F34D843F7DD2E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: 0q4ieK9EHlaoqLo5t7gxlRs9HDR+9MYMOfjaQrgoMfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:16:0e:59:85:77:6f:34:d8:43:f7:dd:2e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=809bf964895ec207b5f1ee09e17f8c35e6e20e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:4f:74:bd:f2:36:af:c3:99:2e:37:25:8a:
e0:43:e3:4a:3e:50:51:d3:02:69:36:d1:6f:11:dd:
3d:02:3f:4b:e7:b0:be:fb:05:f8:c0:d8:c1:4e:d7:
67:ea:b3:4f:5a:b8:6c:49:5f:1d:5a:19:e4:5d:da:
3b:f4:dd:85:d0:81:f9:07:d4:7d:0d:52:71:2a:1e:
3c:27:2c:94:9c:76:82:16:94:e6:54:68:f4:13:6e:
4b:6e:1b:4e:17:fd:6d:e4:79:d1:79:87:fe:77:f7:
e8:bc:5e:7c:10:7f:88:78:95:90:bf:25:79:8b:1c:
1f:ee:aa:bb:05:c6:bc:e3:f0:ee:fb:a4:23:0f:ea:
f3:66:05:89:e0:c0:c3:8c:2b:56:54:5f:fa:7b:f4:
15:ff:ea:f9:32:aa:1d:66:b5:2a:0c:b4:d9:f3:4a:
02:16:af:64:0e:95:c3:61:ec:89:a0:9e:c2:3f:c8:
12:1b:e7:f7:20:98:ad:b3:6f:3b:e7:fb:51:11:f2:
13:dc:c1:fd:73:a4:f9:f9:2d:94:46:43:a8:12:88:
92:cb:6b:e2:01:52:4a:06:b9:b5:04:20:3f:58:04:
8a:70:7a:dd:00:d0:10:f4:2d:d5:d9:30:59:e8:95:
1d:b3:05:f9:c1:20:94:a6:44:e0:91:13:f6:c1:6a:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9B:F9:64:89:5E:C2:07:B5:F1:EE:09:E1:7F:8C:35:E6:E2:0E:9B
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:95:b0:35:e9:bc:c2:a9:e4:9b:fc:46:30:31:23:87:ef:
e8:2e:e0:56:43:c6:61:59:c2:4c:49:af:07:52:46:ed:06:4f:
95:97:e6:c5:c1:d1:cf:59:52:65:2c:35:24:aa:dd:95:e0:dc:
71:54:7f:19:d6:f5:b9:51:34:ea:3e:17:76:cc:4f:cf:d3:6e:
78:37:56:64:04:9d:e6:13:32:1b:6f:90:7f:01:be:b6:99:7f:
ee:04:bc:e1:26:09:7c:af:05:73:c3:5a:c3:85:39:5d:19:80:
73:12:37:03:db:0f:89:75:34:14:74:b5:2f:db:23:2f:08:40:
c0:9e:f6:3a:ab:27:46:6e:9d:79:ba:f0:4c:db:3a:f2:64:12:
74:31:82:b5:9c:a6:b7:6c:0b:db:b8:50:a9:8a:f9:e7:1e:7f:
b7:be:7a:35:08:05:9d:da:6c:85:1c:b3:a3:4e:c6:6e:1b:1a:
dd:07:3a:61:ae:48:4a:15:e2:8c:76:6c:d8:70:d7:9e:93:08:
14:9e:20:d1:03:37:71:16:01:02:73:ec:dc:4b:45:2e:78:d1:
ff:1f:64:90:0a:e7:7f:a4:6b:58:ce:9c:e0:ad:4a:9b:f9:33:
bf:39:dd:89:48:0c:f9:4e:4e:a6:d6:ab:bc:27:4e:87:4f:03:
39:56:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:43 2025 by rpki-client