Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
File: ANCpW-DmARCcsZiEJouiIERVx5A.mft (raw, json)
Hash identifier: CzAAKw0Ezaa5NNeR5OnyzS8M9qTakiz0Uk1eygctUHo=
Subject key identifier: BC:49:2C:7B:BB:94:1D:93:A4:E8:DF:CE:41:33:5B:57:82:15:7E:78
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 0194BBCDE66D1C597BDC18004F46FB813E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: ANCpW-DmARCcsZiEJouiIERVx5A.crl (hash: 3y7GKMCzrTVm+qCnJ1OrTNOCuTY8pH7/WuiN8UiwP+U=)
2: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (hash: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:6d:1c:59:7b:dc:18:00:4f:46:fb:81:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=bc492c7bbb941d93a4e8dfce41335b5782157e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:40:8f:ac:47:6a:54:0b:98:57:8b:a2:57:
1b:b5:81:60:df:b3:49:4b:74:24:de:56:74:31:d9:
bd:39:33:d3:a9:8f:9c:dd:bc:0d:83:35:b5:4c:d0:
c7:77:87:c8:64:be:a1:8d:33:42:4c:fe:9c:75:cb:
be:07:9b:25:49:12:b4:01:98:c5:84:c1:16:a2:75:
fe:9b:8a:dd:dc:da:b0:99:3a:8a:d0:a4:3f:58:37:
1f:96:e2:7b:15:6d:02:32:3c:cb:0e:6f:7b:bd:86:
e3:74:d0:2c:44:96:70:92:15:47:01:71:f3:1f:5e:
76:5e:a4:f7:64:fa:e5:f2:7a:f4:02:40:ee:53:b4:
d3:8c:f1:01:33:88:19:0e:f2:ee:36:08:c4:97:2b:
f3:0d:f8:2b:90:f6:31:90:e0:98:85:0a:3f:23:19:
e3:e3:66:d9:83:01:1d:85:d8:b8:53:ff:0b:a4:24:
bf:ce:d4:7a:1d:e5:01:df:69:70:47:ee:c8:34:c7:
c5:01:10:e0:d5:18:a7:cd:88:e2:0a:23:b2:a0:c0:
94:43:45:23:31:b3:81:90:f8:e6:f2:f3:c9:10:96:
bb:9d:d5:e6:0e:ab:58:b3:34:f6:6a:fe:77:97:a8:
48:e9:5c:49:8d:b3:a1:64:12:af:f3:0a:c1:f3:ec:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:2C:7B:BB:94:1D:93:A4:E8:DF:CE:41:33:5B:57:82:15:7E:78
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:37:50:62:92:58:ed:61:d9:71:6d:12:76:04:13:06:a3:
d8:b2:7b:86:45:d5:f9:fb:8e:85:e0:dd:3a:de:5a:70:a4:bb:
8f:21:d6:a7:09:f9:5a:b2:ed:dc:50:e8:b3:52:92:25:2b:7b:
71:ed:f0:25:62:ad:ca:15:e9:f7:08:c9:08:39:1d:fc:9c:29:
3a:35:71:bc:23:6c:6d:0a:b2:bc:ec:39:2d:c7:d8:9a:de:2b:
d5:e4:47:da:5f:df:dc:8f:5e:20:d8:46:4b:de:d9:47:61:48:
dc:3c:ed:ab:73:f1:3a:f8:41:2b:e4:f7:9e:76:c1:c7:10:27:
5f:f7:81:1a:e5:f6:df:4d:93:72:37:fe:f0:de:12:b8:c9:7b:
9a:2a:ca:d1:f8:5e:89:38:fd:ef:7f:ee:89:3e:76:e2:f3:0c:
10:a9:96:83:80:2c:71:20:31:0b:83:b6:f5:63:86:e6:94:fa:
c3:63:5c:c0:d1:10:2e:17:36:ce:c4:31:5b:af:62:c7:53:f1:
d7:3e:5b:9c:b2:e3:2c:0a:99:cd:f4:f0:43:aa:58:6c:aa:83:
f7:6f:31:67:0d:2c:91:71:31:89:3a:5e:9e:00:08:50:03:da:
6d:65:dc:70:98:b5:52:16:ab:50:47:33:9c:b1:65:e3:58:99:
29:ea:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:47 2025 by rpki-client