Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: DnRa/SfENcnODEz5TciyJWTSrzXa5q19OAjLp/Jr7f8=
Subject key identifier: 5D:CD:48:D5:E4:E5:82:0D:AF:3F:E3:C5:C2:78:A2:C1:32:F5:AB:9B
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 0194BD178104F98C3FFA8FDDA165C2122F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: MIbn2F9HUCHKuVd1rIgdK2xCY7elnwl/7gP3/5xnRjA=)
2: LXtV1SOyemLIBBZI_VMF85otBtE.roa (hash: GHDun7QlntuZhx8oP1im/VJfuudrY5drYDWrntuirXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:81:04:f9:8c:3f:fa:8f:dd:a1:65:c2:12:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=5dcd48d5e4e5820daf3fe3c5c278a2c132f5ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:e7:ba:ba:2a:d8:44:e5:57:2b:04:d9:aa:
b8:6d:80:a1:1c:cd:94:49:0f:6f:dc:8f:59:1c:9f:
6d:01:1e:05:09:12:93:2b:04:77:98:dc:25:1d:41:
3c:f0:68:2e:ea:c4:35:6f:40:e4:18:18:46:31:57:
ac:00:eb:5f:63:4e:ec:c2:c0:38:d8:1c:93:dc:4e:
35:05:50:0a:29:5c:86:f7:d0:a2:07:2c:67:5c:3a:
39:93:af:b1:1c:ec:b8:35:de:d9:2b:48:d6:d4:75:
bc:be:ef:91:72:81:26:b2:b2:9e:1c:49:55:59:35:
3c:8c:92:08:72:16:67:96:e7:19:f3:5b:d9:46:35:
48:7c:38:c0:6b:66:f8:80:c1:e2:f2:44:12:39:85:
02:b4:f9:dc:0c:9a:02:59:99:b6:fc:2e:04:0e:3b:
b0:b1:83:e5:8c:24:13:85:04:7b:01:b9:ad:cb:8e:
0c:9f:89:25:d8:a4:fc:3c:17:fc:5f:cb:0f:e2:af:
a5:8e:11:8b:22:74:84:2f:b4:85:b0:6e:18:0c:e6:
41:d0:dd:c0:db:76:5b:76:f4:c7:27:ab:15:fd:66:
51:e0:d7:73:d9:08:b8:2e:d0:8a:76:26:42:a6:27:
b0:f7:2a:fd:a1:ef:39:a6:b9:9b:10:49:89:5f:7f:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:48:D5:E4:E5:82:0D:AF:3F:E3:C5:C2:78:A2:C1:32:F5:AB:9B
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:60:41:19:51:79:94:de:31:e7:57:0f:7f:4d:e4:83:68:92:
13:f4:55:da:a3:14:d4:57:69:ae:e6:f2:ed:fa:3b:73:aa:e3:
0f:2d:25:35:1a:bf:26:49:0f:a4:ad:f2:aa:b7:8d:c4:a2:6a:
d8:eb:6b:9a:4e:fe:bf:0a:37:e8:5b:21:5c:83:a3:5e:18:31:
e0:82:b5:76:0b:b0:e6:43:00:6b:25:be:75:cc:72:90:aa:01:
3f:ae:c4:04:b1:f6:78:88:41:b8:dc:4e:6c:76:bf:09:36:e7:
90:cc:83:63:9c:72:fe:9c:9d:2e:97:c1:09:2f:11:b9:87:78:
37:45:83:b6:a4:72:b1:76:1c:1f:d2:c9:02:34:43:f0:e8:8b:
b9:b6:44:5b:52:0b:0c:72:2e:d5:a9:c8:ac:37:67:f8:44:7e:
a3:6b:20:91:3d:e8:aa:aa:f1:a0:c2:cc:9c:16:fa:bb:a6:83:
5b:6a:6f:e1:43:22:62:e4:02:ba:b5:6b:06:fd:bc:9a:5d:02:
c6:a3:c4:45:19:e8:75:11:c3:34:c8:5c:ed:de:18:68:e6:d4:
32:3a:91:e3:9e:3b:9d:4c:1a:f2:8b:6c:ea:36:e0:02:cd:30:
db:75:c1:5f:a9:ad:a9:93:c6:9a:aa:65:33:87:69:44:a1:4c:
01:e5:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:38 2025 by rpki-client