Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: W97dvAgrPDba0rmXnQ6WuOy+8+NWf6gdq/lmfXieqfE=
Subject key identifier: 61:6D:FB:39:EF:52:EE:27:A2:D5:A6:75:AB:20:08:6E:AC:EF:81:BA
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 0194BCAA4D222A5F117D02C41BDAB4F99DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0A04
Signing time: Fri 31 Jan 2025 14:01:04 +0000
Manifest this update: Fri 31 Jan 2025 14:01:04 +0000
Manifest next update: Sat 01 Feb 2025 14:01:04 +0000
Files and hashes: 1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: 9ev/wZVppDx4yVAb2RqpQgGq+EHR3H0IeK8MzkxwyaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4d:22:2a:5f:11:7d:02:c4:1b:da:b4:f9:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: Jan 31 14:01:04 2025 GMT
Not After : Feb 1 14:01:04 2025 GMT
Subject: CN=616dfb39ef52ee27a2d5a675ab20086eacef81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:ea:eb:3a:c2:c9:b2:a7:78:73:65:8b:6a:
27:69:f2:10:dc:08:c1:f4:0b:6f:66:24:2b:f9:b7:
02:28:57:a9:f3:67:33:2e:2d:03:78:9e:38:58:3f:
a4:16:c7:84:85:5f:f1:35:42:5b:4e:c2:a5:41:cf:
12:53:d4:eb:df:1d:3e:7e:de:f3:4f:e4:43:83:1b:
09:b6:52:50:15:15:6b:0b:28:66:d0:45:50:4b:53:
b8:3d:af:a2:a7:b8:75:f8:c0:6e:37:d0:c6:88:c1:
79:98:0e:8c:19:06:d2:79:8c:5f:87:7d:5a:04:07:
c1:c8:5c:a5:b3:5f:df:51:57:ab:f7:82:8a:59:b8:
25:fe:8f:47:78:ff:44:d4:b7:73:73:db:70:c2:e7:
f0:af:68:db:2a:c6:f1:26:88:15:aa:35:82:a8:ce:
ea:90:c9:ac:94:40:92:93:7c:c3:63:80:5a:32:1f:
0e:69:d8:cf:b2:40:a9:81:90:b4:85:98:a5:6a:3d:
f2:b5:57:d0:9a:34:df:81:85:7c:64:77:dd:0d:15:
59:5d:ce:25:00:de:54:41:0a:80:0f:88:fa:97:fe:
35:89:6c:15:88:f4:93:df:a2:c2:04:de:f9:8f:18:
e6:6a:2f:4f:38:b6:a7:f5:18:d5:20:09:68:07:7c:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:FB:39:EF:52:EE:27:A2:D5:A6:75:AB:20:08:6E:AC:EF:81:BA
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0c:0b:99:a1:95:03:89:13:ba:f3:41:8d:e5:16:dd:7c:c6:
00:9c:ad:0f:78:c6:a9:a6:79:a1:70:0e:5b:c9:cd:71:6c:ff:
fd:7e:41:63:36:ea:b5:74:9f:9b:41:5c:e0:a4:9a:6c:e7:d2:
22:7e:79:ae:16:01:66:3d:ee:0d:9d:45:0c:d8:c8:9c:96:48:
d4:b4:fc:3c:2d:e9:20:d6:55:62:ee:8b:55:b5:38:4e:e6:df:
1f:19:89:4c:5f:08:15:0d:0d:a9:43:5e:8d:08:b5:f9:68:16:
21:f7:00:b2:bb:26:e9:c2:43:88:da:b5:e3:8a:a3:6e:59:4b:
85:56:60:d7:0a:43:71:ff:77:63:05:e0:a0:78:b3:06:37:d1:
c6:d1:9e:f3:a7:bd:ff:b9:3f:32:ca:ce:14:12:84:d8:26:f7:
09:ae:77:73:26:a7:34:c7:f2:b4:68:1e:1f:60:de:9d:17:ae:
95:74:0b:f4:0d:75:a3:13:7f:69:b1:25:81:46:7e:b7:2d:e6:
66:a9:7b:3b:13:c5:0c:d0:5b:78:e0:b0:46:f6:fb:fa:ce:43:
b2:70:2b:85:d7:d4:ac:1a:0a:3c:c1:2c:85:2e:28:bc:14:bb:
90:05:e3:7a:1f:63:70:3d:5c:97:53:47:d2:00:8e:84:b2:79:
b6:cb:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:51:15 2025 by rpki-client