Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
File: AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft (raw, json)
Hash identifier: N+yjFmKFp0zEgURczuE6k9b9cCz/Pwl2kMw5p0KDeAw=
Subject key identifier: E2:8B:79:E8:52:F4:B6:8F:C5:2B:49:5B:E6:D1:E6:36:57:72:A4:B0
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 0194BD18032382C7295EE6A13A754B5ABF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl (hash: YoutKxQZhxnbKErczry6+5OnzPeAPyqwbKZph8GQMh8=)
2: qen-QoIAAGwgpqx4OQAF6M4rR_M.roa (hash: Pfgs1o9qvVrkxz8on7jtYneDypFRD7JuU2XED3GEHk4=)
3: sJjIi8LxyBaapUPztypafiGazB4.roa (hash: snoS7xcNMuCgLXX7PRPXvmr0bu9uS7kTUSsVN0SedsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:03:23:82:c7:29:5e:e6:a1:3a:75:4b:5a:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=e28b79e852f4b68fc52b495be6d1e6365772a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:e7:82:da:6d:64:a9:82:e8:c8:4e:39:6e:
d3:ef:d5:df:c9:7d:b7:03:dd:3a:ca:93:d3:99:4d:
eb:2b:01:c2:fb:14:56:c9:e9:6d:83:e4:fd:a7:d6:
e1:b2:7e:1a:65:41:60:2c:3b:2c:55:12:88:41:a9:
11:f5:a8:77:60:e4:43:5c:6d:f5:d6:73:06:9d:ac:
7d:8f:fa:ce:be:84:5d:56:ce:62:1c:57:9f:67:cc:
89:ff:bf:35:e4:51:1c:d4:46:27:a6:f0:66:00:3d:
9c:9f:35:88:8a:97:4b:1f:fb:89:b5:2d:09:c7:c8:
94:db:c0:23:23:8a:0c:32:88:30:f2:85:76:ba:d2:
bf:7b:de:10:f4:1a:ad:0b:53:e9:76:9d:c6:ea:a9:
97:6c:56:4a:03:68:e2:c0:a2:f3:dd:f7:4a:20:7d:
6e:70:d5:d4:ee:00:ff:e8:60:a8:3e:bc:a5:f7:fb:
c4:0c:fb:f2:d8:22:7e:6b:7b:d4:1e:70:29:c3:26:
07:47:49:6a:e2:aa:5f:ad:7c:b4:00:55:aa:e3:f3:
c6:4f:0e:fc:d8:98:6e:3b:d0:d1:b1:e0:08:00:f0:
55:2f:b0:55:61:7d:1b:ac:54:ea:98:2a:47:95:45:
5d:29:a0:af:4e:3e:99:4e:f7:ea:d8:14:56:ba:ab:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8B:79:E8:52:F4:B6:8F:C5:2B:49:5B:E6:D1:E6:36:57:72:A4:B0
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:42:41:1e:22:e4:39:63:03:ca:48:de:cd:4e:92:09:56:
59:5a:c4:b9:fc:9b:81:a3:7b:01:d4:c5:cc:d5:d3:db:d3:b9:
25:1a:c6:dc:90:f7:8d:ee:6d:98:7e:9e:52:d4:20:09:2b:ec:
55:6c:af:71:3d:57:dc:60:67:5d:8b:f3:13:6e:b6:2c:be:f1:
fe:61:fe:5f:a8:ee:02:6a:0b:54:54:ec:07:c5:44:67:e1:e3:
70:9a:ed:c1:bf:6e:6c:72:c4:c1:3f:77:db:a5:d5:ab:da:19:
a9:48:e2:c7:ae:b9:5e:1b:06:35:be:d0:63:04:8d:4e:db:a3:
ed:8b:7d:c0:1d:ba:1a:8f:77:f6:16:f5:51:16:cd:ee:3d:d7:
72:f0:4d:73:d0:38:b7:75:f8:ff:31:77:24:ea:a6:56:e6:44:
6d:16:4f:57:cb:76:31:b9:59:27:d4:cb:41:8e:54:de:24:68:
34:5a:66:92:d2:2d:d1:71:0b:ca:0a:20:39:cd:bf:ed:e4:f2:
cd:8a:53:2b:16:97:2f:64:70:05:6f:02:32:93:87:fe:84:82:
14:e8:c0:67:fd:08:52:96:e4:49:f1:61:b3:6b:54:79:b0:af:
fe:f1:8d:9a:3a:7f:a3:02:36:33:b5:c3:0e:2f:5a:b8:a2:a4:
c0:fb:ec:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:36 2025 by rpki-client