Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: Yu4G7Ovw/IUjoXLlyHKodqpsT1OIcFMb1t6zkpX9Tr0=
Subject key identifier: 47:78:E0:11:E4:CA:AB:74:83:43:2D:3A:AF:B9:4A:C7:27:F1:04:84
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 0194BC3C663268F2002F26EBB8BDADC0ABC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: uZZEsaV/ckDIyIeLHxRWwkfRbGpNyp1+Oxe/pmHzVwg=)
2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:32:68:f2:00:2f:26:eb:b8:bd:ad:c0:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=4778e011e4caab7483432d3aafb94ac727f10484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:7e:86:c0:8c:73:f9:c0:a0:c7:be:6e:fb:
2a:7d:41:20:51:f8:25:92:2a:0c:8a:43:fb:84:60:
93:fe:8f:85:09:7d:bb:a3:df:f9:53:03:1f:cb:b6:
34:54:50:be:31:a8:d6:d5:69:20:91:1c:bb:1d:ef:
d5:11:f5:18:3b:f7:a1:76:24:f0:0a:31:18:9e:c8:
fa:90:49:96:6a:71:02:b6:81:1e:3a:42:09:84:fa:
69:2e:af:a8:6d:2f:e9:07:a5:7e:ec:e4:ad:63:ae:
14:13:9d:1b:67:09:50:30:eb:20:48:b9:05:7a:5a:
28:64:7e:0b:3c:ed:fb:89:33:8c:aa:7a:21:f7:34:
2a:c1:30:bf:2a:31:56:0b:7a:9c:10:d9:81:63:7a:
cb:3e:91:38:1c:7d:47:2c:63:a4:64:86:32:cf:30:
6e:0f:ec:d8:a0:f6:65:9d:fc:03:9e:21:52:f3:f1:
60:10:c7:d3:28:e7:c9:1d:34:15:c9:b2:86:62:4d:
fb:df:ff:8e:88:70:82:d0:fe:72:28:b8:a9:ab:e9:
0b:ce:91:40:fd:02:70:76:57:5c:aa:ae:28:f6:24:
09:fe:b5:c0:41:0e:5c:ab:96:06:8a:69:fc:54:09:
0a:9c:f8:7e:c6:d3:cd:b6:c9:96:2b:3f:46:a2:51:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:78:E0:11:E4:CA:AB:74:83:43:2D:3A:AF:B9:4A:C7:27:F1:04:84
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:2d:9e:d4:cb:88:e2:79:fa:a7:75:13:23:7b:3b:ab:2f:
e2:a9:97:50:53:67:c5:6b:16:45:2f:20:e5:fe:aa:6d:53:b6:
b9:74:40:1b:b9:61:3a:ab:b4:e5:3c:bd:36:26:fc:a9:1c:b5:
76:2e:49:f5:06:a4:19:96:12:2c:10:fc:42:0a:7e:91:35:2b:
47:f5:0c:d8:ef:e8:66:54:d0:49:45:81:ff:cb:6d:71:f6:8a:
6c:b0:8b:f3:76:b4:3a:0c:6a:d2:f0:d0:4c:34:a1:de:05:34:
92:3b:38:d8:e1:ae:a5:7a:cd:a4:9e:32:35:2f:18:49:94:42:
4e:08:9f:11:6c:7b:6e:7b:d5:8a:81:4c:d2:ec:14:3a:ca:58:
f4:96:b7:39:9e:b4:9e:17:07:48:8a:3a:59:bb:f0:71:bb:2b:
92:35:ae:6f:e0:34:fb:81:ea:9f:18:73:de:07:29:21:13:f2:
aa:98:c9:11:87:08:4e:1b:ea:ee:17:a6:dd:86:32:0f:75:ad:
c7:2b:3b:77:97:80:96:3c:cb:0c:f4:29:3e:be:7d:c1:28:bd:
e3:fe:a0:bb:85:ff:8c:6e:70:f0:f6:92:cd:23:22:f5:40:54:
a3:03:38:f2:ee:f0:30:69:74:5c:41:ea:2d:38:aa:15:f4:65:
7f:52:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:14 2025 by rpki-client