Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: wrEaqOtE41d98lbhgFtSS761p4ATJhTeCt8GfEiyIG4=
Subject key identifier: DF:8C:F1:3C:4E:83:58:2C:5B:09:7D:CE:BF:8E:A3:B5:A5:4E:7A:36
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 0194BBCDAFFC230DC2726F0FD6B7EE57611A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: vKHosIwI1XHm1VFT+R3f8wKv9Xc6NlRaBAQDZ6/5zsg=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:fc:23:0d:c2:72:6f:0f:d6:b7:ee:57:61:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=df8cf13c4e83582c5b097dcebf8ea3b5a54e7a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:8c:a0:6e:b3:58:8e:d2:b0:7e:c0:69:61:
b0:ec:7e:b3:c4:d8:85:87:16:78:46:28:6e:7b:13:
84:8f:9a:02:cd:a5:e9:d2:94:a2:66:d6:e3:da:d3:
07:4e:b2:bb:b0:e0:32:f1:32:db:60:fd:2d:41:ff:
36:3e:18:7a:ae:81:8e:df:5f:ff:4c:75:ac:c9:68:
7e:a9:ba:34:42:b7:c1:db:44:c7:4a:b9:f0:4c:b2:
96:ba:8f:1b:52:06:30:4f:97:af:ea:86:59:08:43:
1c:93:8c:3d:53:08:2c:57:0e:a8:6c:1b:f7:16:68:
80:e3:b0:06:70:28:5d:33:b3:df:f0:2b:14:bc:e8:
f9:54:b9:23:ec:a2:d6:40:43:28:51:b3:6a:57:b2:
e0:5c:2b:af:c0:7d:51:03:be:91:0f:b2:f6:27:17:
df:bc:e4:1e:a4:7e:ee:18:d9:ad:ea:19:04:77:f3:
d9:bd:18:93:ea:5d:19:79:1f:20:0b:79:67:b4:40:
ad:ec:49:50:14:03:b6:a3:a4:34:07:fd:f2:a8:96:
c4:ea:1b:40:d1:9a:37:a2:8b:94:88:aa:10:65:58:
f2:9a:d6:7a:c8:a6:eb:f5:59:19:8a:54:66:62:1e:
52:44:b4:31:d2:af:d3:da:eb:d1:ce:30:9d:a6:81:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8C:F1:3C:4E:83:58:2C:5B:09:7D:CE:BF:8E:A3:B5:A5:4E:7A:36
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:db:cc:c9:b0:f2:34:b3:bc:a2:7c:da:5c:8a:b1:28:90:62:
b7:3b:93:55:97:39:0b:a5:7f:16:ec:94:e5:d0:8b:09:6a:7d:
d8:61:4b:83:d9:d8:86:77:f5:34:e7:fb:21:da:1d:16:17:9e:
9a:f4:cb:a0:b9:76:df:15:75:bf:36:18:65:b1:55:2d:aa:f8:
cf:b4:55:94:81:4e:f6:2e:1d:7d:32:1a:dc:1d:f9:75:c8:9a:
85:b5:a8:36:fd:f0:1d:1f:b6:a4:0e:c3:8c:8c:28:73:0c:f6:
8e:81:7e:a9:a6:a2:e1:35:98:21:5a:2c:c0:a5:2e:a4:31:0a:
11:7f:66:92:91:d9:5d:e5:d5:fb:d6:79:85:97:46:35:8c:3c:
e0:68:89:45:a4:c1:8b:11:56:b1:28:7d:e6:bb:87:76:3c:77:
62:52:54:aa:e5:c2:6b:74:6a:16:cd:9f:87:37:d2:3c:85:83:
f3:27:6e:4e:2b:90:1c:40:18:c5:3d:f5:65:47:03:23:b2:e2:
53:fd:e2:e9:d8:9a:04:7b:5a:f4:ab:0a:a7:13:27:5c:85:24:
17:12:6b:f9:39:ad:4f:91:70:72:43:ca:58:db:15:8f:b0:4d:
73:bd:09:e8:24:1d:e5:97:73:25:60:46:62:61:8b:44:4a:f2:
f9:c7:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:23 2025 by rpki-client