Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: K7vyOzNc2On5VEYQnMZsLQCdTUzFzSyN0IwJprmSxr0=
Subject key identifier: 79:B7:1E:08:C9:93:BB:6A:57:DB:2E:1C:25:3D:45:39:C7:25:DC:9F
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 0194BCA99540AB001479CB5ECA65F0CD3BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 0EA5
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: 6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa (hash: bndS1Tzx6VzHh/lOs3pK1BLzPGIXQ0EzQwN4Ak3MXSs=)
2: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: 89jn5f60Cfh5Y8zckRBr/EFm8qOUaDU8cdLXVNe3yaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:40:ab:00:14:79:cb:5e:ca:65:f0:cd:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=79b71e08c993bb6a57db2e1c253d4539c725dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:60:f6:c1:34:39:7f:c3:ea:fb:7a:e7:4d:
75:a1:5c:83:24:b6:a5:6d:0a:78:6b:97:e3:bb:ef:
72:ba:5b:4b:31:99:83:1f:97:3f:2e:33:32:53:f7:
89:1f:f5:a8:69:93:10:64:41:0a:e8:dd:8a:c7:88:
e7:c9:44:04:19:5e:6b:51:39:31:35:04:a6:64:6f:
60:34:3a:08:75:b0:c1:ad:f7:47:e8:6a:f5:7a:66:
5b:93:2d:ef:23:dc:bb:ac:9a:1f:03:32:d7:af:9b:
33:be:50:99:f4:07:8e:a0:38:9f:86:d7:8b:51:fe:
00:d7:47:55:91:2f:14:34:ff:10:d1:16:d5:ba:64:
81:6a:60:08:91:18:5e:98:4f:63:a8:14:8f:ba:e1:
56:8b:a5:11:61:83:89:9f:d6:4b:e7:5e:df:0f:4f:
45:b1:cd:d8:60:51:e4:90:b5:a9:65:ce:47:93:3c:
a4:0d:db:13:de:4e:c0:38:91:37:ca:e4:f7:28:cf:
f1:0e:d5:9b:29:aa:44:ca:83:00:46:c8:e5:5b:f7:
d7:12:82:42:cd:59:e3:ef:e6:f0:7d:75:4d:2f:3b:
0a:f4:e1:27:9e:0c:23:a0:6f:d6:32:7c:5d:0d:6e:
8d:a8:f5:cc:2c:61:52:d5:e7:40:a2:ca:8a:1b:73:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:1E:08:C9:93:BB:6A:57:DB:2E:1C:25:3D:45:39:C7:25:DC:9F
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:3b:7e:00:49:df:a7:2d:9d:be:dd:35:b9:24:c0:6f:92:
de:61:a2:56:dc:e8:24:ad:da:4f:25:c6:f6:1f:69:b0:9d:34:
b6:c0:70:5d:3d:7f:04:a6:7d:da:25:87:e4:41:36:59:18:ed:
62:c3:c0:ec:db:00:6b:d6:95:bb:68:9a:99:35:31:38:56:8a:
6a:30:54:0b:78:61:f9:7a:71:ba:80:c4:29:ab:d7:5b:39:74:
3c:91:df:21:e7:76:a8:c5:86:9e:c7:68:1a:96:4f:3e:47:3d:
dd:a1:d4:f0:28:07:e5:a6:8e:5a:b5:0e:15:77:e7:fa:ec:d6:
0e:79:83:dc:e0:0f:66:ea:bb:95:12:27:70:ab:c0:3a:cc:c4:
8c:6f:45:f2:09:8b:73:ae:10:e9:3e:fb:f7:5b:e1:84:47:c0:
18:59:28:23:90:25:a1:53:43:9a:2b:21:b6:7f:24:0f:22:26:
6b:0e:22:18:12:e4:cf:b8:af:a5:31:e5:70:a5:ef:10:ae:66:
76:d2:c4:24:66:ef:b0:d5:90:06:c6:9c:b2:63:dd:77:f9:b1:
3e:2f:3f:e7:7b:f2:29:39:8d:ec:38:37:51:77:02:91:3f:e4:
f6:1b:76:29:6e:10:de:e5:86:3e:9e:18:fc:fa:97:25:42:3f:
9e:56:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client