Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: oanAWf1zWGEexmNozv9VKfhQbdTrQD6kIm8tRaxeYr8=
Subject key identifier: 62:C2:87:E3:D2:8F:F2:2B:37:40:5A:44:D5:C8:CF:65:8D:18:8A:3A
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 0194BD4E8422DA0FB00FC3E00178FCFF4606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: wrBZMxHpMvYwUqF01GB+xOUreko7oltvFxCECuQf30w=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:22:da:0f:b0:0f:c3:e0:01:78:fc:ff:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=62c287e3d28ff22b37405a44d5c8cf658d188a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:8f:7d:69:27:9c:ab:bf:65:24:18:ff:a7:
f6:3d:4e:78:8d:62:dd:b4:a4:92:7b:29:30:84:70:
ce:b9:d2:70:0c:f3:7a:ec:e6:d0:9a:e1:81:21:18:
f0:70:9e:28:87:d6:3c:89:71:92:d3:05:9f:01:4f:
09:8a:32:78:4c:23:c3:48:b6:5c:1e:72:50:ac:28:
3d:d6:f0:9a:ac:c9:17:16:bd:e2:2a:ec:91:8c:65:
60:b4:95:f8:78:b1:2a:dd:bc:4d:ef:1c:d3:75:33:
0f:d7:46:f2:3e:22:1c:f7:ad:50:5f:04:ef:7f:08:
4e:96:f6:20:e0:45:84:1f:15:6e:ba:a0:5b:80:3d:
8b:f3:95:c3:3e:47:e6:d9:17:e4:fb:f3:ab:f1:af:
25:5e:b2:6c:ef:54:a5:37:c9:6f:26:e6:c2:6a:45:
02:10:79:50:4c:0f:13:a6:64:1a:c2:53:9a:17:27:
0d:3c:90:ea:55:55:d7:09:eb:f1:23:4e:6f:37:6a:
ed:fa:1f:90:51:73:25:13:f8:b1:30:54:ec:1d:f9:
ba:7c:3b:62:05:5f:e1:db:db:c7:d1:62:eb:02:2d:
cb:09:ec:82:86:10:2f:0f:af:e2:b5:22:07:11:72:
f4:d1:a7:44:ce:f9:83:d4:b9:51:47:bc:bf:cc:0c:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:87:E3:D2:8F:F2:2B:37:40:5A:44:D5:C8:CF:65:8D:18:8A:3A
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:41:3f:fb:0a:52:e8:68:1a:c8:a2:4e:e1:fe:2d:80:a6:
db:f2:28:b2:1d:d2:45:e7:97:a3:0d:97:b4:18:97:ea:e5:44:
d6:50:8e:4c:54:45:c4:7f:ec:b7:8c:1f:92:1c:ab:57:f9:59:
97:ed:76:78:f0:a6:5d:66:69:db:83:1e:9b:3c:ec:12:be:c6:
f5:db:ae:84:84:c5:1a:b0:76:69:9e:1f:0d:70:33:cb:5b:f0:
01:1c:c0:84:58:87:9e:0d:f7:2b:c5:2e:14:13:c2:73:0b:60:
61:11:7f:7f:79:9d:32:d8:fd:86:04:85:9b:ce:20:db:9b:38:
3c:f9:ba:13:13:14:f2:05:9b:25:41:36:be:db:16:98:82:d2:
9e:99:7b:e0:d2:dd:a9:b9:72:87:03:e2:7f:f6:9a:eb:e8:d4:
e9:c6:6a:ba:ea:0b:26:37:62:37:9d:fa:66:31:0c:3f:15:1f:
c4:73:c6:47:7f:3e:3d:6b:a2:c0:81:e5:cb:28:c5:62:ab:78:
c8:c3:f9:45:35:04:0a:ab:80:e2:44:b9:1e:2b:df:04:0c:39:
44:6b:0d:38:55:de:05:37:ec:55:4d:f2:6f:d6:91:33:cf:d7:
e9:25:97:58:3b:7a:cd:4f:60:53:48:ba:f5:20:b4:56:3d:4c:
d2:a7:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client