Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: jtsvRkV5tFUZ2b70M7ehmKM4aYEvjCTqQ+6mHryo470=
Subject key identifier: 3F:6B:2D:12:A8:2C:05:B0:76:8F:4B:FE:08:D8:71:96:74:D0:0D:76
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 0194BC04ABEEE1ACFE5666CCC90009EC13C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0B1A
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: kcBz5nsVkrZrWppkSyU90fCpFiEk6BNYN1QgoNJqv40=)
2: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (hash: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=)
3: yO3ImEa01zpDmLG6tX70-TkpvRo.roa (hash: RSJIqaRU6YhdiXZuFYexny4+76aM6Lhla9gt2T8Ziok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:ee:e1:ac:fe:56:66:cc:c9:00:09:ec:13:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=3f6b2d12a82c05b0768f4bfe08d8719674d00d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:b4:f8:4f:ec:94:45:d7:17:6e:5f:bc:ad:
35:59:76:3f:53:c8:4e:2d:cb:f8:88:2d:b1:96:b2:
41:2b:bf:11:5e:d4:e2:8e:88:89:9c:f0:83:b2:16:
01:67:67:8e:e5:08:76:8d:c7:52:f6:2d:88:37:ae:
d4:db:a6:38:43:e5:78:77:da:4a:e3:a7:c5:24:4c:
d6:6f:f5:25:b1:69:d6:9e:1f:b6:3a:37:8a:d4:74:
bd:8b:af:c7:04:ad:ba:1e:44:6d:5b:cf:18:dc:41:
39:41:3c:05:10:a4:db:a3:95:31:f5:1f:62:f9:23:
28:29:6f:6e:81:a1:ea:07:a7:31:28:3f:36:a8:46:
8f:9c:2f:2b:4a:d2:05:e3:e1:0d:84:4f:46:71:95:
57:ab:51:9f:a3:6b:2e:ff:91:b5:aa:40:2f:15:f4:
e6:05:3f:8c:79:21:ff:23:83:df:fd:0a:68:ed:c8:
a4:e9:b9:d8:c5:7b:81:c4:c9:76:8e:82:de:89:4a:
74:30:80:76:41:7b:7c:4e:a1:24:53:1a:57:1a:a3:
13:73:cb:49:1e:63:a3:3a:9b:b4:80:f8:43:8d:83:
f3:1a:87:40:66:0e:3a:a3:df:7a:74:fb:a1:2a:32:
1d:4d:0f:62:45:6d:e8:1c:77:61:f8:0f:06:38:a7:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:2D:12:A8:2C:05:B0:76:8F:4B:FE:08:D8:71:96:74:D0:0D:76
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:4b:76:b0:57:8b:8a:90:d1:f5:77:64:20:f6:a3:7c:1c:
8a:ef:0a:87:b6:b6:f3:0d:d7:60:38:f4:14:7f:af:2c:b6:e7:
d0:57:0a:7f:96:7c:4c:01:83:24:99:8d:1e:bc:8c:91:6b:75:
b6:39:cd:72:eb:94:aa:ef:1d:90:d3:34:ce:6f:95:98:fd:35:
fb:46:2c:ab:66:49:3c:08:9a:07:04:98:7d:6d:27:9a:91:ad:
7c:03:d4:9b:01:35:43:17:af:74:6a:59:83:11:c2:c5:ea:b8:
54:c2:b6:0d:a3:33:79:20:fa:63:c4:3a:a1:f0:30:c7:22:d7:
29:fb:5d:a9:79:34:46:a0:f6:bf:c0:35:84:a8:c0:49:e0:a7:
cd:1c:9c:94:7a:8d:69:17:32:6d:d7:61:e4:4e:e9:3e:3a:eb:
26:b0:ab:10:12:2c:93:d6:23:a1:8c:0a:fc:8b:88:a3:8a:64:
f4:2b:74:39:09:e6:c5:38:b2:05:e1:b3:56:43:9d:2a:1b:8c:
e1:6e:a9:43:6d:f8:68:44:b5:05:b2:5b:15:e6:b0:ba:66:c9:
74:48:f7:d1:01:70:87:bc:52:15:ce:40:9c:c6:a2:cf:f7:75:
96:e1:b8:ec:31:c0:47:e4:80:3e:cf:6d:e6:60:22:55:b1:80:
a0:93:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:21 2025 by rpki-client