Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
File: AZlprHWrzVlo8Yng1F272rKYK9o.mft (raw, json)
Hash identifier: bOdsuLlE8tgBAFzuc6Pq7OVjP7IixtbCPhuLsJLlnBY=
Subject key identifier: 07:C2:CE:FA:4A:E2:D2:92:E1:31:B3:1E:07:2A:5C:0A:33:87:83:43
Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Certificate serial: 0194BD85683F77370F4014A4FB0063F03CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: AZlprHWrzVlo8Yng1F272rKYK9o.crl (hash: cRhrZ0Z0l1rVtwMohn9BT19vusXKcr0qWFRxG4NhZw0=)
2: z3WUNqxKMDWur0KI4t-qxJ9N11o.roa (hash: 939Mn6aF9U81uAcv2w44QyTqf1evPpPjx2mvgDn5N/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:3f:77:37:0f:40:14:a4:fb:00:63:f0:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=07c2cefa4ae2d292e131b31e072a5c0a33878343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:60:5f:16:61:a0:27:d4:19:b6:74:45:cf:
11:5e:51:9c:a4:b8:5f:83:b8:00:2e:93:30:83:cd:
28:c1:ca:0b:d1:33:89:1e:3e:43:1e:ac:a1:c2:fc:
da:95:fe:91:c7:06:1f:dc:4b:1f:de:ab:1f:33:6f:
0c:bb:d9:28:4f:25:15:ed:0a:49:2b:bd:53:1b:c4:
1a:b8:38:5e:6f:4b:a9:71:f4:d3:f6:45:77:a8:bf:
3c:c3:28:06:06:72:4a:1d:e0:df:22:02:06:be:e8:
b3:a8:74:56:a2:3a:15:cd:2d:82:42:a9:f2:39:11:
67:5c:6f:4a:79:d7:bf:07:af:df:e0:09:9c:83:2f:
bf:c8:1d:e2:63:75:e3:28:0c:36:4c:22:89:87:f2:
5a:a1:6e:73:44:8f:11:84:6f:d7:25:d2:2f:45:da:
d1:95:00:e9:e1:50:fe:7b:81:45:c0:17:ad:d4:17:
11:d7:2f:dc:52:bf:dc:75:99:c7:66:c0:81:da:ac:
41:78:f0:a7:57:46:ca:f1:20:e7:37:58:4f:b3:6d:
ee:ae:7e:da:3e:c2:3b:fb:14:ff:f7:95:aa:85:c8:
3b:bd:f3:a8:bd:65:97:0a:65:95:6e:8d:20:82:61:
01:ce:48:78:e1:1f:ff:45:a1:40:26:2a:71:d2:7f:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:CE:FA:4A:E2:D2:92:E1:31:B3:1E:07:2A:5C:0A:33:87:83:43
X509v3 Authority Key Identifier:
keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:4c:20:4f:79:63:65:ff:a8:71:77:22:c5:7e:3b:fa:15:
57:09:ea:24:c1:8d:04:1a:88:46:ce:de:94:3c:85:83:5c:fb:
c1:23:c7:de:55:1e:1a:af:05:8e:46:6f:71:47:65:d2:b7:54:
88:0c:7b:80:94:52:0f:75:1c:53:67:b9:ef:70:eb:df:09:20:
46:6f:9c:3c:f8:b4:58:51:e1:27:60:ef:10:e3:12:d8:4a:11:
33:87:87:af:3d:7e:be:5d:6a:43:2d:28:82:e4:c3:7c:81:d1:
95:64:b4:92:77:68:7a:98:5b:44:e5:3f:79:3c:f6:89:53:7e:
1d:76:51:94:90:70:32:d7:c8:7a:3b:44:32:ec:cb:0b:bd:7e:
99:2b:db:26:64:70:87:07:f1:6d:60:5e:9c:3b:81:28:49:da:
d0:f9:03:27:5a:96:b4:4c:a9:04:d2:76:8c:46:11:f2:7a:79:
39:78:0c:dd:a9:44:6a:32:eb:ee:2d:42:9c:34:70:55:46:38:
9a:36:3e:82:16:12:bf:fa:5a:64:f1:b4:8a:a4:23:50:60:b8:
83:fe:66:24:e1:97:cc:1f:99:aa:b4:b2:14:15:4c:e7:2d:12:
c0:53:e8:62:83:71:7f:9f:8c:ac:ea:a2:c3:02:b0:d2:ad:fe:
a5:94:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:30 2025 by rpki-client