Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: 42EYcuqw31pmp7yvNP7v726x4hY9IAl9m1oQKpo8bF8=
Subject key identifier: 78:68:C5:46:54:25:A3:33:EE:99:35:F4:D4:FA:EC:3E:12:E4:5D:0F
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 0194BBCDD251FC62EFCDD9A0CEF8660A6DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: TBYF8XYeXEJ+YpPLn3kElyFbUBjh7Is9QAFDt3mkXPA=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d2:51:fc:62:ef:cd:d9:a0:ce:f8:66:0a:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=7868c5465425a333ee9935f4d4faec3e12e45d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:51:e5:6b:f4:f8:56:03:8e:e4:2e:18:20:
e1:25:b0:cb:fb:e3:36:40:52:40:d7:b8:6f:36:6b:
ca:98:30:17:18:2c:55:a8:ba:22:97:e8:14:f5:e8:
d6:8b:4c:e9:90:98:90:4c:92:70:22:c1:cf:a0:2a:
ae:45:fc:fb:e2:cb:93:4b:3a:e3:cf:60:ac:6f:8a:
c4:ca:3a:82:5d:eb:4e:48:16:2c:9a:fb:c4:93:84:
45:a4:fb:7e:68:7b:9f:7d:1a:a0:ab:1b:0e:33:0c:
71:b3:33:b3:96:26:fc:80:64:fd:50:9d:06:09:d1:
1c:32:59:02:b3:b0:06:e1:80:a3:7c:71:e8:da:a0:
c9:95:0e:dc:8a:ef:81:4b:48:9b:24:17:e4:be:ba:
4c:04:42:d0:cf:e5:02:20:fd:ed:55:cc:4e:94:9f:
b1:c6:28:2c:f5:bb:14:41:82:27:6e:71:2d:ea:96:
b3:5f:1b:09:d0:b3:d2:03:1f:90:05:d7:53:be:63:
ab:7c:c0:d9:61:b8:7d:cc:7b:2a:62:08:93:af:aa:
49:f7:3c:e5:88:50:4c:c3:0c:9b:3b:b8:79:c2:04:
d7:e2:e9:4b:e7:99:8b:a8:77:43:b2:d6:65:92:ec:
76:08:c3:50:46:1f:9d:0f:64:ac:ba:8f:39:73:b2:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:68:C5:46:54:25:A3:33:EE:99:35:F4:D4:FA:EC:3E:12:E4:5D:0F
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b2:07:20:2c:06:0e:8a:b1:bc:cd:1d:b7:36:c0:0e:2d:e6:
e0:2a:fc:99:29:05:b4:71:95:cf:c0:c6:1e:f3:26:4d:c2:63:
df:a5:02:b7:76:e8:3b:ae:97:9c:e0:14:d5:2a:75:c0:cb:03:
24:9c:21:c0:14:b3:b6:16:18:61:96:e5:c0:b0:f9:77:8d:26:
5b:84:80:2f:d0:f0:91:e4:66:60:5b:22:1a:e2:f1:ab:56:66:
da:30:29:00:55:ef:59:fd:ba:6c:8f:06:c5:55:a0:d5:e0:43:
91:e6:e7:7b:04:d0:ed:0d:77:f5:a6:06:de:d7:8b:40:24:8e:
b0:25:5c:aa:32:87:d2:55:d6:25:a7:f5:d8:b0:1f:d8:a0:63:
48:fb:27:ef:e5:dd:38:8f:33:88:f8:e6:44:7d:df:68:43:ed:
64:12:b0:29:c0:60:74:1b:52:9b:78:3c:52:5a:4d:b4:d6:d5:
71:c5:c5:9b:de:c7:40:98:57:d9:f4:e1:db:76:5c:e9:17:81:
57:f5:fd:20:fd:5a:82:94:fc:10:61:dd:b2:96:8d:41:74:81:
71:7b:86:a5:58:78:ce:84:2f:99:09:99:55:2b:9b:3f:55:14:
b6:73:2f:8d:6b:62:31:89:04:13:5f:3b:9b:f2:8b:1e:6d:1b:
8c:2f:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client