Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
File: aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft (raw, json)
Hash identifier: SMyxONADQtadPLjqkz6gZluW9Hu5FAM6L/4HmL0U07w=
Subject key identifier: 75:D7:EE:F5:26:83:42:CE:AA:9E:79:0A:90:F1:9B:70:A5:CC:08:4C
Authority key identifier: 68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
Certificate issuer: /CN=68e078b5181be5fbe914b412a412096bc8d71549
Certificate serial: 0194BC728E3D8FF2A1DE3236A8AC6AF4B29F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: IXwdyS86SbDEc5r6DTqF-yyMhKo.roa (hash: MHPw/G9JdYVbN864pG/b/kFkrvcqi5VhnKr+4T0l/48=)
2: aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl (hash: Snxmsybb5b1jvVGtplOkdfCC2PcGY2eYPIhZUsUdljY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:3d:8f:f2:a1:de:32:36:a8:ac:6a:f4:b2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e078b5181be5fbe914b412a412096bc8d71549
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=75d7eef5268342ceaa9e790a90f19b70a5cc084c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:26:7f:b0:86:2d:ce:63:e2:47:02:71:dd:f1:
11:51:d1:0c:5a:4f:17:52:bc:2e:90:36:5f:b3:1b:
07:6d:c2:21:fd:53:4d:94:73:28:a5:3e:ae:10:27:
cc:05:f9:c3:dc:11:ce:d4:8f:f7:fc:f8:c9:e3:69:
79:ca:15:7f:23:55:4f:d3:ce:96:83:d5:9f:eb:1c:
d9:11:ec:9f:5b:b7:ba:a4:f7:79:ea:b2:21:43:77:
c4:07:58:b8:75:08:cd:3e:11:d1:d0:7b:2c:8c:fe:
d6:79:e4:01:77:c4:02:88:81:4b:49:97:bc:08:e4:
95:27:bc:33:46:93:d2:cb:8c:85:0b:a8:86:1d:ea:
c4:74:06:9a:5e:c5:f8:d5:bc:99:87:5e:af:8c:b3:
02:de:c2:52:57:8e:c0:b6:5a:74:76:fb:78:fa:89:
38:46:05:29:89:69:73:66:ca:8e:d1:6e:66:cd:e5:
06:c4:d4:f8:52:82:ee:99:22:7e:b8:4d:4f:2b:f2:
20:56:c6:b8:d4:a8:1e:a3:33:c7:4e:1c:fd:b4:b5:
e3:4d:dd:60:db:b6:37:8a:6a:19:b4:ca:78:9a:8f:
65:48:37:12:1f:66:a6:07:76:a4:03:9e:92:81:90:
b3:7b:84:ff:c1:48:d4:37:e9:6b:b3:7e:c9:35:ad:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D7:EE:F5:26:83:42:CE:AA:9E:79:0A:90:F1:9B:70:A5:CC:08:4C
X509v3 Authority Key Identifier:
keyid:68:E0:78:B5:18:1B:E5:FB:E9:14:B4:12:A4:12:09:6B:C8:D7:15:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOB4tRgb5fvpFLQSpBIJa8jXFUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/313988-6f21-453e-8ef4-e671d94b0a20/1/aOB4tRgb5fvpFLQSpBIJa8jXFUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c2:d7:d4:44:12:f9:e8:0c:b8:b8:b3:1a:d0:4e:e6:38:19:
c7:64:53:c0:e5:9b:d4:87:b1:ea:9d:51:ec:a5:b5:36:36:d5:
cc:4d:40:4e:1d:00:28:36:65:04:87:21:a6:0a:fb:73:0a:9a:
d0:2a:9e:9a:a2:24:91:8f:05:53:84:52:00:b8:31:d6:67:c9:
d1:5b:23:96:97:f2:57:c6:e9:d6:b4:2c:b1:2e:e4:55:69:3c:
79:84:3a:d6:2f:63:79:8b:03:ec:84:bc:04:f9:72:0d:19:cc:
a5:eb:7c:cf:4c:d3:83:62:8a:b2:12:76:72:9d:cf:dc:16:c9:
21:b5:d4:10:06:e1:57:2f:c4:b8:36:e9:5a:26:02:80:90:1f:
7d:ad:8e:f7:90:9a:f1:4f:b6:8c:5a:9b:18:1e:07:95:27:36:
ba:1f:5c:ca:e5:00:39:36:c2:63:8b:d9:9b:9a:f9:71:fb:2f:
ba:1c:4e:25:a6:75:c9:87:8c:7c:c0:89:bd:39:fb:c9:30:99:
92:e3:85:ef:32:50:b7:d6:c1:84:b8:54:1b:02:9d:a8:01:34:
df:b4:8e:bf:29:d5:85:45:00:75:db:4b:73:a1:07:05:f6:9b:
85:57:31:f0:29:a6:c6:61:4e:26:34:16:af:d0:81:bf:94:25:
a1:9b:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:11:34 2025 by rpki-client