Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: w98C7XISfUyQsamZRFA+nec6YBHP2S1RnFWnjuCF7yE=
Subject key identifier: 79:2F:16:2A:3C:9F:79:E2:E2:64:6C:C1:37:9A:06:56:92:09:38:0F
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0194BCA9750FA85E9CA9FB18BA53272C7EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: 6UgEfCHQ3gKSOTuqe6rMFSSLgu50qp2/IKPNRKpcKTw=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:0f:a8:5e:9c:a9:fb:18:ba:53:27:2c:7e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=792f162a3c9f79e2e2646cc1379a06569209380f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:29:fe:46:68:cc:a4:7d:62:f7:3e:c3:7d:
01:35:ff:78:84:7d:1f:10:a9:40:83:d1:ab:89:22:
05:63:85:83:2d:02:c7:ae:c1:fc:8a:6c:35:79:37:
d3:7f:24:e2:7b:90:18:70:cc:c5:b2:0c:c6:01:1a:
c0:a6:36:3b:d3:3f:20:5f:74:75:b8:cd:17:ab:55:
14:00:54:b8:d5:5f:63:01:ef:62:cf:5f:bd:14:f8:
c6:b5:0a:ce:1d:2c:2a:dd:2a:9f:4a:92:8f:e5:14:
f3:90:a1:e1:8f:13:98:2f:2b:84:74:20:44:6b:ca:
54:ed:13:7a:d0:f1:1f:9e:e4:27:93:6c:00:13:68:
dd:df:c2:b1:6e:01:4b:cf:d2:65:e0:e5:98:3f:84:
07:49:5a:54:22:13:6b:b1:71:ef:e9:ca:61:9d:c3:
74:93:7f:e7:88:46:36:1b:3a:20:a0:84:2e:c6:e6:
3b:51:55:e7:68:8f:c6:f5:40:ee:84:c7:23:45:ff:
c7:21:57:79:2c:41:c6:41:45:01:8f:04:8c:17:e0:
66:24:cf:19:64:fd:7c:80:e5:69:84:97:9f:42:32:
7e:56:eb:87:aa:d1:75:2a:90:d7:3e:1c:4d:a7:fa:
f5:5a:bb:49:90:67:6e:37:22:80:2d:71:63:2d:06:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:16:2A:3C:9F:79:E2:E2:64:6C:C1:37:9A:06:56:92:09:38:0F
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:9d:b0:c2:96:57:0a:58:d6:f1:b3:71:2c:9b:c3:0f:d8:
23:c0:53:f8:ff:a6:fb:26:1a:b2:23:03:e7:c0:fa:78:9d:3f:
ad:e0:b5:d3:54:fb:ec:2f:c9:80:b3:31:25:39:6d:96:39:d4:
96:ef:70:33:9f:3c:b0:8b:2b:9a:59:29:3d:3e:20:a8:5a:4c:
66:c3:b8:53:64:f3:d9:cb:7f:8e:42:92:c3:79:34:be:2d:55:
85:5e:ed:30:76:a0:85:b2:a0:d3:ca:26:e6:26:74:8e:d4:c4:
e3:cf:bc:3b:9f:24:87:56:e2:78:14:ee:29:53:af:30:b6:7a:
29:0a:2e:cc:b3:54:5c:71:41:97:73:42:75:80:02:dc:ff:c6:
60:d7:83:6d:c9:46:68:aa:26:27:17:2f:dc:27:c4:d0:ba:d2:
ca:ee:bc:e3:1b:01:6a:23:db:5e:5f:e2:3c:32:b7:6d:f3:37:
ca:ab:b6:d8:21:3e:10:a4:ce:de:15:8c:55:43:8d:a1:e7:f9:
c5:36:6b:70:3f:24:14:01:1e:e2:4c:87:a2:e8:36:aa:ed:ca:
fc:82:44:ce:a2:5f:3e:d6:fa:e2:cc:57:d8:35:15:10:90:e5:
24:a8:fb:dc:e3:d9:cd:44:c1:0f:4b:97:cd:49:1c:ae:77:62:
0d:12:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:29 2025 by rpki-client