Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
File: ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft (raw, json)
Hash identifier: IUQrOAs98GlnDyW4SoZH46+SqeC5LZSLn4muIczCnZU=
Subject key identifier: 7D:23:FA:ED:44:09:1E:FD:D3:7B:5A:CD:00:67:6C:8E:EF:3D:6C:B4
Authority key identifier: 00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
Certificate issuer: /CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Certificate serial: 0194BC73108F54DD2DB7184631B01E5A704E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl (hash: 4cYgvkB8paBTeAuKdlQP2kHQJ6XqgRu1BboR1+gcM+A=)
2: TEkUtdSJlCwJOLmZGlc_aRWHYHQ.roa (hash: 6v28t0X8IRT5vkPcD+0Ak9J7sxuHKDaxDcFCFxn0jgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:8f:54:dd:2d:b7:18:46:31:b0:1e:5a:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d946a5340b7f0ff50d9afa6519ade7f3a4a082
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=7d23faed44091efdd37b5acd00676c8eef3d6cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:89:00:db:ad:b4:1f:a2:38:fe:f4:b8:07:
00:a9:74:39:b0:ad:f9:e9:4e:c6:4f:12:a5:a8:1f:
08:d9:1f:75:b9:40:78:0e:39:78:93:8c:43:c1:c2:
15:e9:e8:8e:96:e2:3f:ae:30:a4:bb:ae:e0:45:4e:
e7:f8:8c:7c:f0:4d:b6:26:81:f4:93:99:0a:d7:4a:
be:14:05:53:3f:c6:b0:5e:67:0e:21:b3:e0:01:d5:
62:74:d8:bf:9c:35:88:b7:54:3a:54:fa:f7:26:00:
b9:ee:a7:9f:ad:78:3d:0e:56:01:15:69:a6:2e:41:
9b:8a:37:3e:da:c6:dc:50:8c:5d:c6:0e:97:9e:fc:
07:2a:cc:b1:b2:b1:73:d8:27:f6:3d:6e:87:a1:45:
1d:01:0a:b9:39:86:53:57:e9:82:2c:84:fb:7a:86:
cb:b4:76:a6:25:c2:1b:27:87:4f:8b:4b:77:8a:ae:
cc:0a:2f:8e:79:19:c2:d6:4f:0f:90:77:3e:c6:a6:
70:cb:6e:7d:96:39:2a:2d:a6:57:4c:b1:49:ba:e8:
49:99:70:1b:e5:46:ae:90:09:d3:b6:f9:50:45:ff:
27:c0:ce:bc:5b:20:5a:d6:f6:8a:58:cf:71:8c:25:
ef:bb:aa:2f:33:75:5c:aa:dc:7d:9b:7a:de:51:55:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:23:FA:ED:44:09:1E:FD:D3:7B:5A:CD:00:67:6C:8E:EF:3D:6C:B4
X509v3 Authority Key Identifier:
keyid:00:D9:46:A5:34:0B:7F:0F:F5:0D:9A:FA:65:19:AD:E7:F3:A4:A0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANlGpTQLfw_1DZr6ZRmt5_OkoII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/399d62-882a-443d-bd80-55ddf80e9a9d/1/ANlGpTQLfw_1DZr6ZRmt5_OkoII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:21:73:41:8c:29:9f:62:63:2f:50:6d:2b:9e:35:1d:20:
25:2e:15:a2:64:bb:61:70:0e:8b:53:c5:95:2d:16:7c:41:8b:
70:63:e3:45:3b:40:0d:26:09:3a:d9:f4:9e:46:d0:f9:24:1f:
6b:c0:4f:d7:de:56:b4:b3:4b:ce:a5:df:ef:db:f4:84:ef:5e:
73:2a:ff:63:02:97:f6:7b:f6:9f:60:21:9f:78:af:a0:51:58:
fe:58:74:f6:7f:a8:af:dd:d2:b5:e6:c4:d1:ea:06:38:77:89:
ec:61:77:53:d8:ab:23:f2:4d:f5:db:ce:c0:fa:5a:ce:35:27:
83:4b:62:77:66:79:8e:35:ef:8d:2b:83:9e:48:2b:48:5c:9a:
51:ab:60:fe:1c:e8:b9:5d:90:81:3e:a0:3d:c8:64:e9:b9:96:
66:ab:68:47:17:b6:35:4d:39:73:24:be:7c:9b:7e:71:fe:98:
f9:b2:26:2d:b0:7e:19:af:9e:da:43:ce:dc:1c:cf:27:0b:ff:
ca:ea:c6:df:8b:8f:53:3a:27:39:d6:40:55:cd:e0:ba:a3:9f:
7c:87:07:96:f3:d3:1b:b1:58:cf:43:dd:be:7d:8f:4c:eb:17:
d3:0d:4c:0b:b0:7e:22:b9:ea:0d:96:f2:3e:c1:f8:d0:b7:82:
89:a0:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client