Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: jyvsBiN66Ac6Tp54IgVehLkO5WCmDoPA/t1gtAOq5vA=
Subject key identifier: F7:94:19:A5:37:F3:2B:BF:DA:09:16:D3:C1:CD:B2:AE:B4:FD:AD:AB
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 0194BBCEF3148D774F071A13BD872617D61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: X2Nv9TfdEVoVJ49TJzM1fw/CxDC87b/wLvXHG1f4W1k=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f3:14:8d:77:4f:07:1a:13:bd:87:26:17:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=f79419a537f32bbfda0916d3c1cdb2aeb4fdadab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:b5:89:86:60:d0:e6:d3:06:41:f2:11:d1:
e6:85:a3:df:1f:5f:06:11:17:ff:d4:5d:75:7d:d4:
da:ab:27:50:45:0b:5e:80:da:78:cd:67:7c:0c:5b:
a4:27:5d:c2:86:ed:24:36:ff:2f:d0:21:2e:dd:27:
42:f8:b8:90:8b:4b:07:12:49:bb:e6:d0:05:bb:01:
66:5e:ce:e0:41:63:d9:f9:a6:a2:b9:a7:71:76:65:
c5:2e:5c:d3:1a:a9:0f:d1:f7:c7:1b:8e:eb:58:17:
5e:c4:23:eb:c4:f4:4e:1d:cb:ac:7a:63:42:b0:4e:
5e:6e:67:03:3e:29:5d:ce:35:a8:ed:4d:a3:bc:8a:
81:d3:12:91:22:c6:8d:1d:f1:10:e5:43:53:aa:b8:
d1:57:49:d8:d3:a5:59:f4:57:43:24:da:c2:a2:7d:
2c:30:fb:af:4d:81:ec:0f:04:7d:68:7d:7f:9f:55:
6c:8e:fe:d5:91:a2:0f:be:2f:2d:2a:eb:81:7a:32:
14:5c:e5:53:f4:d1:3f:dc:0e:7c:9a:8f:5b:d2:12:
26:1d:fa:bf:8e:38:d1:f8:2c:1f:82:b3:ce:71:ac:
32:2b:e1:ad:82:e7:de:a9:7f:94:9d:c0:41:57:1b:
fe:62:23:24:e0:75:23:66:cf:3c:06:34:20:59:dd:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:94:19:A5:37:F3:2B:BF:DA:09:16:D3:C1:CD:B2:AE:B4:FD:AD:AB
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:85:c1:c6:cd:5b:2f:28:43:33:48:d5:8c:05:f3:6a:6e:93:
17:cf:e9:a3:9a:a2:a2:25:4c:b2:e5:69:9b:73:d3:97:04:1b:
4d:ed:69:60:b5:23:98:40:99:8b:22:63:7c:51:b8:8a:9c:cc:
62:ad:c3:ac:5c:cc:07:ec:e9:69:03:51:33:b8:8a:8c:a2:00:
de:27:3d:d9:be:cf:ab:a2:5c:2d:6f:a4:c6:59:11:0f:24:0f:
d9:2b:c7:60:af:80:55:2d:b1:32:ac:ba:b3:6d:a4:18:1b:90:
ea:95:2e:c2:36:70:6f:78:75:64:aa:b3:96:9b:58:d3:98:ae:
c7:3f:50:e1:c6:91:17:2f:d4:a2:e1:ef:92:69:e4:38:88:b8:
e8:ed:65:f6:cf:98:f2:77:58:55:34:a6:32:bd:70:7c:03:1f:
57:5f:25:ab:86:22:7f:f3:25:db:ca:de:2b:0b:f4:7f:3b:c9:
aa:97:ed:f4:76:f6:6d:fc:59:05:d9:a2:dc:7d:94:d6:f4:11:
b9:30:a3:a9:ab:e4:45:f9:7e:74:d4:61:9b:77:5f:f2:ac:11:
50:5f:9e:2f:2a:81:ea:1c:a0:01:9c:cc:17:3c:2f:54:9c:8d:
41:e5:bf:4d:ee:3f:d1:0b:12:3f:d2:2f:fa:8c:c0:0b:91:ca:
91:8b:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:28 2025 by rpki-client