Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: U2kvxYwIIlNKSHozgI9R39d2+RUm0yXKMQJUtbFpuIU=
Subject key identifier: 3A:9D:5B:6B:4D:3E:6E:2F:A6:AD:D3:90:62:E5:4A:7A:A0:EB:9F:A5
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 0194BBCEDD4DA2C1A06A5FEBE7D958E9A385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: j6gg5KaNQyiEyIPZLdmGYzjCaog4u5VTJFqG+fIJoj8=)
2: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:4d:a2:c1:a0:6a:5f:eb:e7:d9:58:e9:a3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=3a9d5b6b4d3e6e2fa6add39062e54a7aa0eb9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:c9:6c:00:fa:83:cb:98:05:a9:d4:26:9c:
ec:44:0d:70:5a:95:aa:08:75:14:db:77:0b:fd:c2:
a0:63:72:69:86:02:60:f5:10:7a:2b:67:fd:44:fa:
0c:c3:c9:ae:39:ab:8b:d7:c4:1c:a1:23:01:db:23:
f0:9d:24:25:ca:18:07:c5:94:f0:a5:b8:95:2c:17:
78:9f:61:39:1b:6a:f2:92:db:d6:6e:df:b2:ec:4e:
ff:70:32:f1:9e:69:a6:ec:ab:c7:59:f4:f5:76:a9:
fe:46:df:98:7c:f1:1b:45:f6:89:7f:c4:34:db:33:
f8:c6:8e:ca:5f:bb:5c:7e:25:4b:de:2b:47:2b:d2:
78:1a:93:89:ed:4c:44:69:37:07:79:b4:bb:1d:5a:
e5:c6:2c:2a:1f:a2:9c:3e:2c:1d:15:7f:81:7b:68:
5a:34:30:92:85:4d:b6:77:55:85:a4:e3:e6:bb:b2:
0d:e5:4e:6f:7a:e1:b2:75:55:34:03:af:aa:75:cc:
fc:a7:12:48:01:37:65:76:cb:92:1d:7f:e8:36:d5:
23:59:94:e3:94:da:82:b8:ac:79:0a:4c:18:a9:0f:
72:82:79:f5:d8:bc:79:c4:e8:1f:3b:e8:82:ef:35:
55:32:8d:5e:62:3a:8b:12:8f:c7:6f:23:f2:38:11:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:5B:6B:4D:3E:6E:2F:A6:AD:D3:90:62:E5:4A:7A:A0:EB:9F:A5
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:80:6b:ab:37:77:1f:45:c0:bc:c7:19:72:20:af:19:69:6f:
16:4f:b1:9b:71:0b:15:6f:04:78:8e:0f:c5:85:f3:85:d1:30:
5f:4d:44:d1:e0:aa:db:fe:f5:2f:30:9d:a1:35:b2:a6:7a:bb:
14:eb:cc:96:38:8b:f5:90:07:86:ae:0d:a4:76:8c:b1:8e:68:
39:53:65:68:d5:2b:95:8e:b9:a4:f4:1e:13:63:78:19:3f:34:
0b:27:68:ed:2d:1d:12:70:94:f6:1f:03:37:1c:bd:81:4b:76:
bf:70:50:fb:6d:b9:6d:0f:60:d8:55:c6:1c:16:e8:35:a8:44:
64:9d:9c:32:35:98:49:4b:f5:8c:95:c8:2e:98:6e:55:fc:7d:
93:c7:65:58:c3:a3:4e:8b:89:75:2d:7c:a3:a2:96:67:62:a2:
95:4e:eb:e8:e7:6f:d9:f2:f7:d3:e2:7a:38:bc:28:34:1e:74:
9b:ea:38:b4:34:26:dc:4a:77:87:db:01:1f:47:49:84:f4:46:
24:e4:62:37:e6:c6:6f:18:47:29:2d:56:76:27:f3:83:e1:ef:
88:a6:52:f4:03:4b:31:b3:e8:15:6b:c5:81:2c:d4:c6:17:d1:
38:5c:4f:77:ca:6e:38:c3:de:a9:3b:0e:58:32:5a:ad:86:37:
ba:af:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:02 2025 by rpki-client