Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: jf08XofOEt0IjWYVqgjP7jtqj+tUTLNeWmj0qRP0pMs=
Subject key identifier: 85:65:76:50:D5:73:EA:46:C9:C1:BA:E8:99:3A:C3:56:5D:CC:45:DF
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 0194BD4E5D5C25AF9301332212F8F9B982C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0A79
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: 0rrpMQfJNYaZTTYHy/27jg+K9J6cnK4TXw/40yX7n+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:5c:25:af:93:01:33:22:12:f8:f9:b9:82:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=85657650d573ea46c9c1bae8993ac3565dcc45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:3b:2d:c4:5b:46:39:80:cd:1a:64:eb:2d:
a8:17:30:bc:08:32:53:fb:94:4b:32:22:a3:92:55:
f9:d3:b2:8e:c0:8b:dd:d9:d1:2e:3f:da:06:e6:bc:
e3:29:4b:74:b1:08:fb:6f:21:4a:6f:15:64:be:16:
9f:e2:df:e5:e4:71:eb:9f:65:af:95:0c:2d:34:b8:
99:fb:e0:4c:42:91:fd:39:2b:fd:b6:ea:36:37:9c:
3e:c5:22:41:3f:9e:48:d4:60:c4:01:9d:1f:13:75:
24:e3:ca:bd:f4:d5:53:c5:87:c7:25:93:3e:40:d1:
12:fe:b1:a9:e9:b1:3a:a1:d2:0b:cf:9f:24:9d:33:
b6:ee:97:02:76:29:4f:0c:76:69:32:a1:55:18:5b:
2e:ce:20:fa:53:ea:75:a4:87:04:05:05:e3:4b:87:
21:82:06:16:0c:3c:3f:88:61:4b:2e:fd:b0:7e:67:
0d:70:a0:58:f6:c3:39:0d:8f:09:c3:b9:ca:6f:4a:
98:13:a3:7e:da:ce:51:3b:02:ad:fa:5f:c4:23:72:
13:f1:73:2c:b2:bd:b6:cd:07:5c:f2:fc:0e:b7:fe:
71:c3:1a:86:eb:eb:69:33:1b:01:cb:45:4b:0f:ec:
25:b6:6c:10:05:bb:2c:e9:5b:9b:34:3c:5c:ab:e3:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:65:76:50:D5:73:EA:46:C9:C1:BA:E8:99:3A:C3:56:5D:CC:45:DF
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0d:28:a3:3f:99:aa:85:fa:38:74:dd:b2:60:f4:57:b1:68:
62:c7:86:07:78:ca:d0:05:b5:b7:8f:f1:ab:ed:c3:80:8e:a2:
12:72:dc:13:55:cb:18:0a:1b:a1:bb:54:e2:e7:a3:73:87:4b:
e5:a1:b4:52:97:ee:bc:36:03:d3:3b:f9:18:2c:85:8c:1f:8a:
28:ba:3e:f3:e5:06:20:00:1d:4e:7e:4f:eb:e7:b6:a1:21:27:
85:d6:2d:83:dc:20:3a:61:6d:a5:3f:ee:6d:66:34:ed:7b:dc:
21:48:5d:aa:a6:01:b7:4b:a9:ee:42:d1:bc:45:c2:be:32:6a:
40:1b:dc:de:6e:05:a0:b5:e6:05:cd:42:01:5b:78:e0:00:ce:
62:07:c2:64:c4:66:de:89:30:90:ba:fd:85:aa:3b:38:e0:79:
c4:7d:77:c9:1f:27:0a:2a:84:6d:14:d1:44:e9:32:d9:56:46:
65:64:0b:24:35:ee:b2:32:c1:e5:93:8c:5c:c8:a5:de:de:12:
4b:8f:ec:10:0e:5d:4a:3e:44:1a:0d:b8:cd:27:a1:a3:25:75:
1f:e4:45:6d:c2:7d:30:35:44:c8:79:f0:60:e0:a9:43:59:0c:
ea:46:36:8a:3c:6c:d0:c9:93:cf:ba:c7:35:4d:0e:79:1a:fb:
a2:e0:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:39 2025 by rpki-client