Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: WxaAdNiXeyfIUYpMQ1BgZNPV/9thT5EqJOjPdTGM6cg=
Subject key identifier: E9:DB:C8:69:24:06:60:37:4F:A0:4E:D0:19:75:D2:E6:FF:E7:ED:48
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 0194BC7326126BECB397302CE8A7D3D736AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 0CEC
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: GvPi4EH7oSyZTme9zx9acm7DiI2fFA75B0z1DBqeoy8=)
2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:26:12:6b:ec:b3:97:30:2c:e8:a7:d3:d7:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=e9dbc869240660374fa04ed01975d2e6ffe7ed48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:45:a1:e1:1f:2f:d8:52:92:6a:51:93:31:
79:71:6e:c4:1a:6d:2f:4a:8c:10:c3:b0:bc:f4:a7:
74:50:9f:be:d4:0a:ca:83:f0:19:84:31:ea:9b:19:
85:e9:66:54:ae:8b:79:95:a1:d0:a0:01:c1:c8:93:
de:86:70:e3:88:8b:7f:fc:ce:91:c1:cc:29:60:07:
98:69:fd:da:3f:3d:bb:a7:ef:2c:48:83:a4:f1:3a:
d7:a0:eb:5f:7a:e8:5c:20:97:5c:dd:96:49:6c:54:
1f:66:03:77:c4:f8:f6:ce:32:75:6d:7c:10:3e:8f:
dd:c8:f4:1c:0b:c6:d9:ed:da:53:b7:d3:ae:4b:c1:
2a:db:61:31:c6:08:ca:e9:09:c3:ea:c1:72:35:6c:
97:c0:31:c5:b4:4a:1e:e4:73:8a:fa:81:b0:4e:62:
ca:74:a6:58:47:ba:06:67:39:4e:0d:d0:b2:29:3c:
28:33:68:0b:b9:9f:e4:14:97:6b:dd:7b:a7:af:3d:
fc:26:7c:cd:15:20:3f:a8:15:2b:db:41:9c:c9:17:
bd:46:07:0e:53:69:9a:a6:2e:95:41:d1:a4:0d:4b:
94:82:04:75:0a:07:92:e6:8f:95:0f:5e:b9:b5:12:
43:ad:ba:87:f0:8c:5d:cc:4f:af:ce:09:e7:4e:59:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DB:C8:69:24:06:60:37:4F:A0:4E:D0:19:75:D2:E6:FF:E7:ED:48
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:42:33:22:dd:95:1c:cd:a9:83:f8:d3:87:b7:14:32:80:61:
17:07:63:16:bc:10:5e:8c:a1:58:e0:fb:de:ad:83:52:92:b3:
7f:47:74:0b:8d:b1:4f:68:d5:c5:a5:db:3b:5c:0c:7a:64:81:
96:ed:fa:fe:1a:c3:ef:e4:0e:ae:f7:14:4e:b0:c9:a3:9e:25:
a3:87:4a:57:61:d4:11:53:ed:64:ed:7c:7c:4a:e2:fc:37:0d:
ad:a2:da:8a:6d:79:c8:29:38:f1:30:02:39:aa:5b:7f:f7:dc:
1d:ce:0a:83:af:d6:50:d1:f9:78:f8:3c:63:0f:4b:0d:bd:a0:
fd:9e:e3:32:0d:72:6d:14:e5:ac:4d:f2:0c:61:5f:61:f3:6c:
1f:cb:80:73:79:30:66:8d:06:ef:71:0f:87:94:f2:94:49:ca:
cd:ef:99:0c:19:23:f7:19:5d:cb:82:3e:0d:09:03:84:db:38:
a9:20:23:33:8e:a5:fc:b5:37:85:4c:b1:ff:4d:33:36:e3:75:
80:e3:15:3e:04:65:d9:33:23:66:b1:fc:fa:9d:a8:e1:67:95:
11:ff:e8:ef:c6:b8:0d:48:15:18:9b:15:e5:c4:27:0d:50:47:
34:c0:2d:8f:b3:81:43:1b:74:28:5e:e9:13:2f:58:77:f7:b3:
45:b7:4d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:00 2025 by rpki-client