Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: tVw2+EXj62Xh7hd6NXYqyPOw3cCnoL5wIz3obUhpG10=
Subject key identifier: D7:8D:83:F8:03:E6:67:04:8D:17:94:09:CB:16:F8:15:A6:C0:C9:A8
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0194BC73279042824C46FB68D8253E11EFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: NEMT9DJrBRZ7JN6fVfDqidAsEfeTu4j/y9ukGyBIY/w=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:90:42:82:4c:46:fb:68:d8:25:3e:11:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=d78d83f803e667048d179409cb16f815a6c0c9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:86:39:b8:08:0c:40:71:e7:db:2b:f5:f0:
e7:17:0c:52:38:1a:ed:1a:65:09:f2:57:61:e6:37:
94:4b:7f:17:b8:8f:a6:22:c7:69:48:86:a0:f9:c4:
76:81:bb:66:87:cc:82:4a:0f:41:3e:b7:07:45:59:
03:15:24:16:d2:c1:17:20:9c:ac:08:91:ef:f5:d5:
38:8e:91:29:6e:d9:f4:fa:4b:6d:77:f9:88:67:65:
96:84:ed:fe:52:aa:f5:6e:d2:f7:04:55:14:3a:58:
6e:d5:a0:56:84:f2:d6:b3:b7:ea:21:3d:54:5c:a6:
aa:be:d3:84:ed:ad:a7:84:c3:3a:06:09:90:ac:4b:
bc:15:2a:b0:f0:c0:73:4b:c3:22:6e:38:2d:cc:ea:
e6:84:30:62:70:3d:3a:20:82:68:4e:9b:ec:02:ed:
f2:60:fd:45:e5:c4:5e:21:8e:9e:d4:94:dc:0d:b4:
89:d1:b1:13:64:0a:05:c9:9f:ac:8b:c5:5a:e0:a6:
a7:6a:c2:5b:ad:ce:3e:33:ae:db:a4:ee:3b:4a:83:
28:54:c0:b6:f4:e2:a5:57:86:a3:65:7a:51:89:2d:
d6:cc:24:14:15:ca:d5:82:8d:8c:31:77:cf:3d:db:
0d:ae:10:c3:19:8b:9a:ef:9d:97:7a:a2:c3:59:df:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:83:F8:03:E6:67:04:8D:17:94:09:CB:16:F8:15:A6:C0:C9:A8
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:7b:1a:3b:46:d5:5c:00:fd:b7:f6:df:3e:2c:00:4f:db:
34:3a:ed:de:b5:7a:1a:55:b5:72:b9:9d:79:74:a1:d8:2a:2c:
d3:ca:63:67:32:dd:88:22:93:31:11:0e:21:0a:dd:7b:5e:a3:
ea:82:35:9d:55:57:04:75:d4:34:22:2f:7f:16:ab:11:1f:3b:
db:01:ec:18:50:17:f8:91:e2:0b:f9:41:42:20:2a:b4:fe:72:
18:6c:a4:40:23:c9:ca:0e:77:a1:ae:96:cf:cc:23:80:00:ec:
13:31:de:d5:c1:c2:b1:ec:48:e7:ec:20:bc:e8:fc:76:bf:cd:
1a:72:2a:3e:a9:8e:a7:b0:f0:37:31:24:8f:62:64:6d:b8:64:
49:8a:dd:70:d3:3c:e4:ff:c6:ba:e0:73:79:3d:53:3f:60:ef:
c8:18:bd:80:4a:00:78:97:7d:1a:9a:d0:26:32:a2:52:b7:ec:
42:0e:28:de:67:dd:5a:55:ce:b8:29:e2:04:cc:ce:77:8e:db:
b0:5b:7a:0b:85:f5:e6:f8:25:53:ba:41:d1:ee:be:22:75:54:
ce:15:db:a8:b5:cd:01:8c:23:df:39:0c:f0:34:3e:62:0b:3c:
b9:aa:c2:47:78:71:5e:a0:6a:c4:33:f9:eb:9b:d8:25:40:9c:
c4:d6:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:45 2025 by rpki-client