Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: u6ayVGbEKQqHnDA5c+MgSuHyDjZOtWBqZJ1OjGbT7q0=
Subject key identifier: 8C:04:61:90:A8:D2:EC:8B:7C:FB:90:46:5B:76:A3:14:8A:5C:EA:05
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0194BD17B0948522D3E7793D474C4972A083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 01A3
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 7OyYlqJDPitcjzgxgLosr36YYoyMifwfEfyxhRODd/0=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:94:85:22:d3:e7:79:3d:47:4c:49:72:a0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=8c046190a8d2ec8b7cfb90465b76a3148a5cea05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:d3:39:52:71:04:10:e1:f1:1f:f7:69:f7:
f6:bd:5c:a9:6d:97:53:40:43:6e:bf:80:71:ab:3d:
9b:e2:2a:6b:e2:29:78:8f:d7:b0:dc:b9:10:f1:08:
7f:94:88:cc:a5:1e:a2:f8:00:5b:dd:aa:7d:9e:3c:
34:6a:58:12:5f:53:17:26:f2:78:85:c1:7c:b6:b8:
f1:a1:63:ab:10:60:21:d8:40:f3:16:bf:31:0a:4f:
67:62:5d:61:0d:01:93:7a:29:83:67:48:1e:38:82:
13:42:44:19:56:96:09:c1:fd:86:f1:98:f0:a6:fd:
f4:43:66:f3:27:ed:3b:bf:e1:ed:ee:78:b6:ce:34:
ea:d6:b0:44:74:e3:e8:86:98:da:7e:58:2a:88:ef:
f7:2c:c9:4c:17:64:cf:cf:64:7b:5c:01:15:40:a0:
44:3d:d5:00:81:54:33:0f:38:17:ff:0f:40:ee:7b:
43:29:6b:0a:52:5b:28:4f:bb:db:12:8a:7c:20:42:
4c:ea:cd:c1:53:e3:ed:7d:cc:a3:82:0f:2e:f4:a2:
07:6b:2d:02:d8:93:4e:1e:a2:d1:fe:dd:56:01:74:
df:44:ad:a7:e0:14:5f:14:4f:7c:ee:90:3a:ec:0a:
54:55:63:c4:68:7e:bb:b6:3e:75:d7:12:5c:6d:3e:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:61:90:A8:D2:EC:8B:7C:FB:90:46:5B:76:A3:14:8A:5C:EA:05
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:75:c5:22:ac:73:d7:bc:2a:97:6f:d9:fe:72:6f:42:d0:
a2:05:1d:0f:65:15:b6:da:cc:dc:85:8a:6b:25:68:82:36:8f:
41:49:09:7c:36:ed:80:66:6a:84:67:0b:5e:a2:23:56:72:fb:
48:0c:ec:c5:07:e3:26:5a:b8:bf:a6:5d:0c:77:08:9d:fa:e9:
d2:9d:f7:7c:ec:ec:10:eb:13:7f:e2:a3:75:b6:ea:85:af:b0:
af:76:c5:ce:75:e5:d7:2b:63:a8:36:d7:35:d7:08:fe:30:95:
13:d6:be:a6:0f:3d:59:70:70:3b:cc:72:ae:91:c2:a6:9c:1b:
65:a2:1f:59:be:5d:cf:2a:1f:97:ab:a1:88:3b:ba:da:5b:75:
a2:0b:f2:a5:c4:d6:71:8d:63:56:9f:c8:f5:d1:42:98:e6:fd:
29:d0:19:ca:55:c1:95:ba:88:ca:06:13:cb:57:f0:f0:bb:03:
6e:2a:3c:26:50:ba:57:23:df:16:8c:b8:4c:63:92:d4:b1:e4:
97:8d:7e:bc:44:77:17:fa:4e:44:17:c0:ec:d6:de:dc:29:37:
83:19:85:0c:92:4b:a6:ee:e2:85:f9:24:7f:42:6d:6b:ae:c9:
12:20:c5:d6:db:f9:2a:2d:f7:36:ed:cf:60:14:5c:7b:dc:3e:
b2:eb:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:21:08 2025 by rpki-client