Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
File: aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft (raw, json)
Hash identifier: dvhnLWfZwdsTIsOgCu5dFuZX+lhO8K8IfBooZzjhDPk=
Subject key identifier: E2:D7:B3:CC:02:1E:BB:5F:0B:E8:F5:A8:00:EC:11:92:AA:A4:23:C9
Authority key identifier: 68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
Certificate issuer: /CN=6821c8ff0437f7edd829166fde03446f86109d80
Certificate serial: 0194BC3C477FCF03078638CA49878D0FB4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: NmoeARNR5KlnZdBERWuM-iNzYM0.roa (hash: HgaWyfSju8BbiVq620WeDucyKoI/pqgp0CZAcN9HrcI=)
2: OxQUm2cc932_SbZHxUC7er0Sf-I.roa (hash: j3K3BKXe7Af0d19rliHQJv9FsfvecTZMNvSiBZonE64=)
3: ZH-i__Oj4SIwtAOHRRVv0u8J8eI.roa (hash: WEK6Mlk9pLflVadH6HQ/a95uE6G+8NUpMYALAx2797k=)
4: aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl (hash: wcGnT1wL5ToKfJ5jpa094N/Rt18DA2cVyyIF7eRe66Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:7f:cf:03:07:86:38:ca:49:87:8d:0f:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6821c8ff0437f7edd829166fde03446f86109d80
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=e2d7b3cc021ebb5f0be8f5a800ec1192aaa423c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:23:8f:fc:66:a5:da:22:9e:69:f6:0f:d2:
fe:8a:51:07:a9:6e:7b:70:42:c2:f3:af:93:c2:aa:
af:47:9b:7f:68:0e:2b:81:e1:66:8a:03:a6:5d:55:
7c:0a:cf:2d:51:ea:28:a8:31:d1:6d:31:fd:0f:59:
b0:3d:41:f7:77:da:1f:8f:6c:fa:21:76:71:82:19:
59:28:d7:11:fa:0a:69:21:9e:f3:f5:98:bb:f4:46:
b5:66:aa:53:3b:44:48:62:de:c4:b5:f0:39:7d:28:
62:d8:01:c9:d9:8e:22:18:e6:c8:15:a0:95:69:1d:
0b:cd:17:57:7d:10:2d:7e:ec:0d:bc:d9:e5:5c:2d:
b8:dc:3d:9d:7d:ef:e0:40:80:04:f7:c8:90:5c:6d:
1f:ad:59:27:83:91:ed:7a:14:84:bf:16:59:70:dc:
f7:a1:aa:d7:a4:2a:54:e0:bd:1f:68:69:2e:cc:0c:
68:e0:8c:3c:19:36:f6:54:4b:d2:15:ac:fc:b0:af:
6f:6f:9b:de:c9:4a:b8:8d:e2:62:77:d4:42:e4:40:
dd:d8:b7:26:5d:63:1f:b6:d0:87:4e:86:4a:cd:66:
11:7b:22:13:11:c1:e0:a1:4f:ab:31:7b:24:a6:f9:
06:6d:50:6a:06:37:da:95:25:78:b1:10:98:a2:75:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:B3:CC:02:1E:BB:5F:0B:E8:F5:A8:00:EC:11:92:AA:A4:23:C9
X509v3 Authority Key Identifier:
keyid:68:21:C8:FF:04:37:F7:ED:D8:29:16:6F:DE:03:44:6F:86:10:9D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCHI_wQ39-3YKRZv3gNEb4YQnYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/13b144-be16-4922-a983-25ae9293f6b4/1/aCHI_wQ39-3YKRZv3gNEb4YQnYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:bc:bf:f9:d8:40:72:8c:1c:14:a9:09:19:05:e5:53:cc:
24:b8:e2:26:90:ca:e7:d0:2d:9d:73:7d:11:7c:64:9e:fd:a0:
d5:94:17:c0:e8:ff:57:b9:2b:39:23:81:22:ac:3b:29:b2:91:
9e:d6:09:37:ac:7f:69:d6:d4:21:2f:37:97:53:db:4e:d6:e2:
ee:87:6c:06:fa:87:13:87:6a:d7:9b:7b:2c:cb:3f:ac:6e:71:
50:91:35:08:df:91:f2:32:1f:38:ea:37:c2:55:7d:3a:8e:5b:
49:eb:84:2f:ba:34:65:37:92:9a:fb:b5:38:6f:d1:7f:0c:39:
c7:38:70:b0:9f:d4:90:81:d1:5f:dc:9d:58:13:90:92:a4:d2:
43:e0:0e:9e:a6:f7:69:76:89:10:82:fd:89:98:fc:46:9f:4d:
37:36:64:8b:66:b8:e1:2f:d0:64:db:da:21:d6:b2:d0:9f:f1:
5b:1b:0e:23:b2:db:26:89:87:a8:b6:8c:8b:ea:b4:f8:b6:74:
27:8d:a0:e0:50:5d:44:77:fe:fa:0c:d6:f7:2c:a0:66:66:39:
6e:19:5a:32:90:d0:eb:92:aa:a6:d0:4d:95:4c:00:47:5f:ba:
b3:cc:7c:cc:60:81:56:2c:0c:d0:f0:0c:a1:18:4c:e6:b3:01:
5a:a7:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client