Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: c1LxBnxKMVy9IIOXKKSp3KxhCDRulM5s6DjpCncdFB0=
Subject key identifier: 0A:E9:54:E9:2D:4D:8D:85:45:C8:02:7C:C0:40:AE:BB:64:DC:96:96
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 0194BBCE45BCC5D82D52AE8ABADF77835AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: whZsO8E/8j0xUmVgvpmy6Dc8pRiwsjvsvNxYX6S3IPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:bc:c5:d8:2d:52:ae:8a:ba:df:77:83:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=0ae954e92d4d8d8545c8027cc040aebb64dc9696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:44:e5:6e:14:3a:7e:20:fd:65:3a:68:76:
0b:77:02:2f:3d:70:ba:a3:d4:bc:4e:4a:75:3e:46:
16:ad:a3:9c:d0:d4:14:36:9f:3c:9a:ed:23:6a:db:
f2:4e:9e:c4:6b:e8:37:c1:8d:0b:7b:f4:63:9f:bf:
88:04:ff:72:62:19:15:0b:1e:c8:dc:cb:22:e0:d0:
40:6a:d0:53:8f:b5:ad:d5:39:b2:b2:d9:f9:ef:50:
ea:5e:1d:cf:7f:2c:96:bc:a2:1c:ef:69:2c:a7:c2:
45:98:e2:f4:8b:d2:70:71:a7:42:ad:63:14:02:f6:
a1:ed:39:e8:33:0b:d4:41:af:a1:6e:6d:06:96:6f:
4a:47:0a:d7:e6:dc:f6:4e:ef:c9:72:67:92:9f:10:
4b:1f:19:d8:e9:2c:68:53:78:62:25:30:29:ee:f0:
1b:af:d5:93:89:71:77:a2:49:0a:7c:0b:cb:c6:75:
7f:97:57:2c:47:dc:0c:4c:ec:36:c2:90:41:15:2a:
a3:9a:0f:08:00:17:62:14:05:41:6c:23:a1:bf:6c:
b8:5c:5f:9b:63:14:b4:27:2b:f3:4c:9b:9e:ae:9c:
46:89:33:5b:93:ac:47:08:ec:2c:14:99:9d:1a:3c:
93:c0:e7:75:84:0d:b0:3a:58:e5:58:65:d2:7f:32:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:54:E9:2D:4D:8D:85:45:C8:02:7C:C0:40:AE:BB:64:DC:96:96
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d2:13:61:98:88:3e:3e:d1:90:59:c1:56:eb:34:e1:0e:7c:
dc:04:f2:5e:32:ef:65:d0:8b:a6:2a:00:f1:af:7a:69:af:1a:
4e:a5:62:9e:23:5b:63:fa:be:16:0a:50:17:c4:23:de:2f:f8:
a3:05:3e:7e:3f:2b:14:f5:2c:8f:82:dc:ab:ec:86:5c:32:42:
08:f7:fc:82:70:bc:49:37:0c:96:47:73:dd:c1:f9:7d:f7:ca:
c4:d0:43:f7:80:b7:fa:4b:c7:fc:77:63:de:6c:28:43:52:74:
33:28:fc:4c:35:54:48:27:3f:54:8a:60:7d:0e:ac:f7:ca:f7:
96:9d:db:79:a8:80:eb:46:ff:75:da:e9:e4:3a:f3:57:ed:c4:
23:d1:78:97:0d:93:e4:a8:67:ac:54:3b:ce:ec:8a:3b:b7:00:
f3:cf:90:56:91:1c:d4:7c:08:e5:c5:20:d8:54:a6:21:e4:24:
23:96:28:1c:6b:24:df:5a:31:a9:14:d0:db:42:19:b5:e1:0b:
b8:87:e0:fb:a7:29:8a:5c:10:44:67:f9:8c:ae:d6:c1:75:dc:
5f:02:fd:ba:39:79:5e:d4:e3:2e:a2:8f:75:5b:1c:35:35:13:
ef:21:e4:38:c6:17:e2:51:3a:7d:bf:8a:ea:af:4b:2b:c3:c4:
25:00:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:10 2025 by rpki-client