Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier: 4Cz7W5vvSPi2Yo1ptGqWr2/gCReTpTPQVQs+4LzIJsA=
Subject key identifier: 60:74:71:F0:18:CC:94:AA:F0:D6:B7:A3:8D:F1:32:FA:D3:85:A2:7D
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 0194BBCE06B4CDD77C369AC36CC48E95445E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number: 0AC3
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: fLfXBt4EWRetznPqro1IyAXqfXngstEDD/xv35yNL34=)
2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:b4:cd:d7:7c:36:9a:c3:6c:c4:8e:95:44:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=607471f018cc94aaf0d6b7a38df132fad385a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:e6:80:b4:4d:0b:da:ab:35:02:e2:16:01:
0d:56:13:a1:c4:34:51:17:02:1f:9b:c1:d9:11:67:
b7:c0:95:41:43:a6:33:ad:de:aa:90:f6:6a:b1:63:
1d:0f:b5:dd:c7:85:12:33:ae:a1:84:d1:86:37:52:
f7:76:58:16:32:8f:7f:10:b3:b2:b7:2f:c2:ec:09:
bb:ef:41:a4:62:01:2f:1c:14:c5:cd:9d:40:14:0b:
09:90:97:15:3c:d7:e5:62:e2:4e:4b:bc:d6:2b:2d:
4b:ea:22:da:b9:69:46:af:48:66:2c:a9:d4:b7:83:
2c:af:4b:fe:c4:38:c6:62:6d:af:5a:b1:d9:c5:33:
2d:3a:36:a8:11:92:56:b9:04:db:13:b4:df:3b:02:
70:8f:e9:3d:bb:97:16:0a:e0:b7:28:52:5e:4d:25:
c2:7c:99:79:f5:bb:d3:f3:41:b9:92:87:e0:1a:96:
b3:aa:16:85:a8:1e:81:15:d4:66:b4:31:1a:c9:08:
24:7c:be:04:67:2f:02:67:ec:c3:e5:d6:5d:9c:bf:
a2:45:66:27:b3:6e:42:93:99:de:dc:4c:b4:34:79:
d1:95:ac:16:9a:4c:9e:b4:4d:ee:18:b9:80:83:a3:
8a:91:50:88:55:89:d1:e0:62:98:fa:08:cd:d6:10:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:71:F0:18:CC:94:AA:F0:D6:B7:A3:8D:F1:32:FA:D3:85:A2:7D
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:80:17:b3:e6:d1:73:6a:a2:94:e6:a1:1a:09:45:2d:a6:5d:
79:84:80:9e:a6:04:a2:84:f4:69:1c:e2:74:68:40:87:04:f3:
46:5b:be:23:d8:8d:b5:14:0d:9a:ba:ca:df:0e:05:0d:1f:07:
6a:77:d6:79:54:5b:a0:a6:04:4e:40:9d:d4:22:85:5f:f7:9b:
c9:77:b9:e1:d2:33:64:ff:22:4c:e4:28:6b:dc:a5:b3:09:3b:
74:20:fb:6b:ee:6d:4f:44:79:c4:39:f0:26:58:00:98:66:6c:
1f:98:27:a9:1d:b6:68:dd:5a:12:44:86:58:77:84:bb:61:65:
b1:20:18:08:84:8d:df:d6:db:84:61:0e:df:bf:51:bc:41:b2:
b0:25:84:86:14:a5:12:bd:1c:5f:a0:df:16:88:47:e4:41:ce:
d7:0c:aa:b7:17:15:7f:9b:94:33:21:0e:2f:77:10:87:e2:97:
3a:51:e3:2c:a0:5a:e3:ab:93:ba:e7:a3:6c:d4:40:0e:77:e6:
47:e4:a8:14:b5:31:8b:55:08:29:f3:d6:8f:21:b6:c2:58:0c:
b2:60:94:1a:a0:95:bb:3b:96:a3:c5:b5:95:88:dd:0b:35:5d:
17:3b:f6:00:f9:99:64:ef:b8:0c:be:c2:07:fe:b7:66:a5:e8:
53:0d:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:27 2025 by rpki-client