Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: trbb3kxAEMZZGzX2GMrKgNqs3UtNrrS54UirSANzgiI=
Subject key identifier: 12:37:68:C0:26:77:54:EC:9C:81:BB:FD:5D:D4:72:2C:8E:6E:54:DC
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 0194BC3C53F05903D141EC47EA99D480EF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: f1rdKNer3ucqWxPZEOBzO4dbJ202Z9eJNb8YOc5FGGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:f0:59:03:d1:41:ec:47:ea:99:d4:80:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=123768c0267754ec9c81bbfd5dd4722c8e6e54dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:6c:c8:f6:c0:c0:f3:ac:0f:9a:75:66:c1:
9a:19:02:58:28:f8:b3:ea:9a:b5:d5:13:2e:6d:4b:
f1:86:d0:af:0f:0f:4c:21:bd:97:cd:fe:5e:e3:5d:
e7:86:d8:f6:6b:ae:21:e2:07:ee:4a:f8:24:f5:9e:
f4:fe:71:48:3f:87:97:44:d8:e6:52:db:74:ea:1a:
5b:3e:aa:b2:2e:b6:57:8f:9d:c2:24:40:e8:64:ef:
0d:86:d1:06:37:15:a7:9d:59:f1:29:e1:9a:c7:fa:
f7:01:18:eb:e0:52:0f:ef:27:86:a7:e0:09:5e:ca:
e6:a3:f8:57:c7:bc:b8:ea:20:92:d2:ce:23:58:86:
1c:31:86:ec:4a:e7:f4:ab:64:7a:3d:19:cc:0d:db:
0b:26:08:6d:19:53:fc:45:e9:e8:0f:70:73:11:34:
6e:2d:5f:02:6f:70:3e:67:36:49:93:a7:e6:30:83:
9c:3a:31:7a:56:36:63:ed:0e:af:0b:59:0b:c5:1d:
5a:63:10:87:89:f3:26:d3:b7:0a:1e:89:ed:3c:ae:
79:5d:1f:4d:f2:3c:73:2c:e2:95:b2:a4:bc:fa:1a:
fe:e3:26:b7:c8:1c:98:7d:3f:d0:ee:8b:18:24:bf:
2c:8a:b4:6b:ec:67:32:16:e3:cf:6c:15:21:df:27:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:68:C0:26:77:54:EC:9C:81:BB:FD:5D:D4:72:2C:8E:6E:54:DC
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:d8:b6:8e:41:92:3e:36:6b:77:e0:ee:10:ce:ef:81:94:69:
32:5a:5d:3f:5b:7d:55:c1:e9:df:6d:9b:d0:aa:17:c0:4c:5a:
7a:bd:6e:a6:56:39:a0:c6:09:cc:8b:99:9f:5c:fb:62:5b:26:
99:15:f7:2e:c0:e1:bb:79:6b:88:8e:77:ca:5d:63:71:86:65:
29:65:00:65:f2:02:79:ef:9c:19:7d:d3:f0:e2:88:f0:20:25:
d5:31:dd:d2:70:ea:3e:dd:76:2a:66:8c:c8:6b:49:9c:32:72:
ec:01:33:69:a6:22:2d:ff:b0:a4:3a:38:93:e4:3a:0f:4e:b7:
10:7e:6d:5e:92:65:95:95:ec:1d:17:15:97:6f:f8:15:ef:41:
ee:f7:83:1f:eb:86:a6:d4:bd:af:15:7a:f8:3d:c6:40:53:e9:
ba:19:16:ef:63:db:e2:09:45:b9:76:c1:42:f2:b7:35:ac:ed:
51:1d:5d:e5:c6:3b:15:96:b4:a3:3b:d5:d4:46:5b:74:51:68:
7d:d4:b3:1a:d2:45:c3:7d:72:d2:d6:56:fd:35:f3:75:24:2a:
ee:0e:30:ad:23:3a:80:d8:24:6c:e5:eb:37:cc:44:87:b4:3c:
0c:a0:64:0e:26:4b:61:37:1f:e9:95:af:11:6f:0a:38:4e:29:
66:5b:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:50 2025 by rpki-client