Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
File: aqNKS6w794E80qZrT0W5x4bdNUI.mft (raw, json)
Hash identifier: uqjsDak8xVKSPAtew1IKcSNMAhMhBp2kpZbWDb+33WM=
Subject key identifier: 15:76:5F:CE:F4:45:7A:65:84:94:43:02:88:1E:9A:B5:C5:16:A5:37
Authority key identifier: 6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
Certificate issuer: /CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Certificate serial: 0194BC729E19118A9F034E5E404DA486DAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
Manifest number: 0679
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: aqNKS6w794E80qZrT0W5x4bdNUI.crl (hash: G7n1+JHpORGyOHZXQzdrKdVnqxS2dM7A1+pXrgc2NOY=)
2: b9B102wOebSEH0EiAU4o7haSTNE.roa (hash: w8TiYlYrrX0BopJEemJvanYXKIEW88KrCZAniAUGX7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:19:11:8a:9f:03:4e:5e:40:4d:a4:86:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa34a4bac3bf7813cd2a66b4f45b9c786dd3542
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=15765fcef4457a6584944302881e9ab5c516a537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:f7:3c:24:6c:75:01:e1:73:1e:b9:b8:be:
40:2f:3e:24:e2:ca:bd:42:18:e5:45:53:9d:b0:64:
4b:ea:2c:ea:c8:a4:5c:c6:10:2e:bf:ef:4d:bb:3a:
de:ad:75:01:36:ac:40:cf:83:3c:10:16:b7:5f:ad:
14:e7:68:82:fc:ec:52:64:f9:f7:51:27:f6:d9:f4:
c4:5b:7a:d5:67:57:34:db:eb:81:80:ef:15:f3:a5:
51:1a:17:10:80:75:d8:41:f1:6c:78:b4:5c:40:25:
f0:a4:50:f5:11:72:51:84:e9:d4:a6:44:97:93:23:
78:01:47:05:1c:a4:56:24:c8:03:3a:b1:aa:3b:c1:
7f:28:68:1e:2e:ee:8c:59:92:d4:7a:bf:d9:5d:8e:
41:67:9f:ac:60:31:b7:11:07:a8:97:8f:95:90:d2:
e3:3e:db:ea:33:10:49:34:f0:18:16:5f:53:86:dd:
d2:f9:64:6c:16:b7:fc:bc:8a:a0:d5:d9:ae:50:7e:
39:4b:41:21:c6:6f:6d:46:70:f9:f1:03:16:2b:fa:
75:4f:ab:76:4a:a6:81:bb:e1:32:07:7c:6e:74:49:
6e:80:15:70:df:44:da:1f:45:4f:59:f2:ae:60:de:
76:84:00:08:8e:cf:25:eb:db:6d:9f:39:d5:3c:ea:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:5F:CE:F4:45:7A:65:84:94:43:02:88:1E:9A:B5:C5:16:A5:37
X509v3 Authority Key Identifier:
keyid:6A:A3:4A:4B:AC:3B:F7:81:3C:D2:A6:6B:4F:45:B9:C7:86:DD:35:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqNKS6w794E80qZrT0W5x4bdNUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc920d-8109-4119-b840-664ef0da8c30/1/aqNKS6w794E80qZrT0W5x4bdNUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fe:11:37:c1:16:ab:bc:65:4e:d3:d2:ab:94:c1:2b:8f:88:
f1:2c:b6:f1:32:e4:5f:6a:15:66:46:13:9d:04:e5:9d:a6:20:
fb:07:e9:05:27:04:0b:eb:75:d6:49:62:c1:44:c2:41:24:16:
d5:80:2e:b9:57:20:4e:44:f0:75:ea:31:aa:bc:2c:60:df:02:
68:98:2f:2d:76:81:31:41:63:01:37:06:54:e3:d0:d5:e1:62:
de:3c:14:a9:ac:8b:79:d9:3e:06:a7:78:4c:ce:d6:87:be:4f:
b9:fc:46:ef:dc:73:d4:a8:ff:2c:94:0e:c5:91:c3:29:8f:21:
0b:9b:44:9f:25:6e:92:d1:cc:68:3e:91:ba:a7:72:f6:9d:bc:
d7:69:66:11:32:b6:44:e0:01:f5:92:f1:0b:29:e9:fb:15:85:
93:b4:3a:38:c0:14:4c:5c:79:bd:9e:e1:17:21:c0:6e:c3:12:
99:b8:d2:5e:2a:25:a1:f6:5e:10:66:83:4c:2c:05:6a:0b:0b:
ac:d9:b3:2c:2c:3f:6e:d7:c9:d6:35:f0:e4:e4:bc:70:2d:2a:
2c:37:06:08:63:03:51:3d:7b:8c:c2:08:c1:1c:4a:00:9d:07:
67:e3:4e:17:01:09:ee:56:32:cf:a1:40:17:d7:95:5e:67:7e:
d3:20:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:13 2025 by rpki-client