Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: eNUzisHJ6MzEl2pP4DHXyS2V5jrRRiar6S9D5GG+3gA=
Subject key identifier: 2D:99:92:85:44:A0:50:12:5B:98:83:15:06:EE:AA:4A:DC:A6:7A:B4
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 0194BC3BBD08BFFA14183614527CE0908301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 10C2
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: t1hIDaWbQfYXD+4w2QT/nPE6gxb7+qMrZ11eQUFmZcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bd:08:bf:fa:14:18:36:14:52:7c:e0:90:83:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=2d99928544a050125b98831506eeaa4adca67ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:d1:79:f1:9d:1e:02:f9:f3:46:85:a9:7b:
08:1a:f0:d6:e0:61:60:0c:66:9b:9a:89:36:33:54:
8c:5c:81:d7:6e:49:cd:b7:bb:48:58:5a:82:55:1f:
79:95:48:6b:91:ae:42:11:d6:ae:29:2e:a4:74:7d:
8c:eb:ce:da:12:d1:a1:cc:02:37:18:82:e2:c4:af:
f5:3e:bf:cd:1d:a6:bc:62:ea:4d:66:aa:f4:1d:cd:
ca:85:71:11:2d:20:97:09:fb:86:f3:5c:13:b3:f4:
b5:1e:4a:a7:b1:34:ec:e0:85:1d:e8:8a:7a:9e:49:
4c:e6:a0:ea:49:f5:76:f3:39:f3:4e:06:40:a5:4e:
e9:16:af:86:f6:84:ff:c8:b8:2b:24:6b:d7:c4:79:
c2:f8:70:3f:c6:aa:12:9c:3c:ec:46:bd:b5:17:74:
2c:d4:ce:92:cf:2c:6b:76:14:75:6b:23:86:14:51:
65:45:05:af:52:74:34:52:cd:fa:32:d4:26:98:65:
b6:8a:7c:9d:c3:4f:8f:5e:29:a9:95:68:c2:08:20:
d6:4f:43:dc:d4:1f:bb:8f:d4:e1:09:91:11:01:45:
1a:57:0b:54:a9:be:4b:e5:ea:5e:72:47:5a:e9:43:
2d:96:28:68:5b:fd:44:37:a2:27:32:46:ac:5e:ad:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:99:92:85:44:A0:50:12:5B:98:83:15:06:EE:AA:4A:DC:A6:7A:B4
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:9c:85:49:da:91:fd:a0:97:90:d0:18:d5:07:50:a9:8e:
9e:e6:ee:38:c7:51:b3:27:72:31:6c:c2:11:ff:e8:82:67:27:
d8:d5:51:c9:c8:61:6b:d3:2b:bc:3e:ab:df:65:9d:6f:9e:01:
0e:79:95:8b:34:ac:2e:2f:0d:42:6f:33:a2:5b:df:33:63:81:
56:56:fd:10:c6:d4:a0:6c:69:27:b9:a6:31:35:40:33:c0:aa:
ea:ca:85:28:87:f4:a3:60:91:09:b1:07:cb:37:89:0f:6d:a4:
9a:bc:e6:ab:ed:db:9c:ba:fc:49:89:72:93:f7:a6:4f:e5:32:
f7:66:14:8d:22:70:4e:91:a7:ff:13:21:16:a8:ad:81:34:3a:
84:cd:26:b8:16:df:31:b2:16:54:cb:f9:6d:25:6b:76:0e:f6:
e5:5d:c4:22:c5:1e:33:fd:19:b7:05:82:62:8a:7a:f2:ed:2e:
ac:12:9a:a5:10:bd:6f:f0:68:32:4b:4c:03:12:d9:7f:3d:69:
e6:cf:2e:d7:f6:7a:3f:95:1e:95:67:ce:b5:87:ac:14:c2:e6:
3b:67:5d:00:bc:23:7e:8a:9f:d0:b3:e3:32:29:82:ee:62:4c:
20:72:12:c1:28:93:11:7b:9b:27:6b:87:2a:e1:a5:39:05:bd:
02:61:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:46 2025 by rpki-client