Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: h2S2F3vhhlvLgzei7KKuQPJ4x+1o68WKHrg780dmBRE=
Subject key identifier: 63:79:A2:06:64:73:F7:7D:BE:78:03:CA:97:A6:F0:3B:3B:36:37:96
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 0194BCA9698878FA3FAC6DC33392D252BDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: PJLV5QR6cWeyEeOYJIA3DKEj0hHjtA6+8gctUGmL/lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:69:88:78:fa:3f:ac:6d:c3:33:92:d2:52:bd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=6379a2066473f77dbe7803ca97a6f03b3b363796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:4a:d2:a5:8d:22:95:18:39:d4:10:32:50:
76:f7:b1:65:47:25:24:31:90:e5:c7:80:e3:98:0a:
5d:73:97:7c:d6:2c:07:0f:93:7e:f7:5e:ec:f0:ec:
dc:79:3c:98:d1:0c:52:97:5a:43:f6:12:85:1a:35:
27:39:ce:15:3c:a0:0e:12:a7:48:e5:ca:23:50:4b:
42:ef:46:ef:e4:c7:cb:dc:6b:9b:20:9f:f2:f6:cc:
1e:2a:84:fe:af:fe:1c:c9:34:6f:fb:2e:e5:c1:fa:
57:a0:26:5a:b9:9e:24:c0:f9:52:a8:60:64:75:7b:
41:23:89:19:f1:59:1f:e6:e6:6a:d9:2c:3f:7a:97:
43:b0:e2:49:d8:10:ba:48:93:1d:74:f7:97:68:7c:
46:c8:b6:db:fa:63:ed:77:f8:07:f0:f1:2f:70:cc:
6b:24:3e:00:52:d7:66:7f:0a:c4:ad:05:ff:ec:85:
fa:49:a4:14:d0:14:c7:d5:26:28:ac:89:58:ab:2b:
e9:25:b4:8a:4b:0f:57:ae:0e:31:a1:cb:b6:5f:b8:
36:94:6b:8b:ba:71:06:2b:74:56:5b:7a:a8:ec:d8:
c1:eb:3f:76:f4:95:f5:6a:1f:d9:8d:40:f0:e5:a8:
ea:33:2f:96:74:08:6d:d5:ad:af:20:e2:59:f7:21:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:A2:06:64:73:F7:7D:BE:78:03:CA:97:A6:F0:3B:3B:36:37:96
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8d:e0:2e:8d:9c:31:7e:8c:2f:57:84:30:5b:d7:75:da:36:
b2:81:04:32:17:29:2f:20:36:6a:20:26:e5:f9:ec:4b:36:fa:
39:42:96:1e:4c:49:2d:21:41:87:92:83:92:76:d0:70:b3:50:
76:ce:f8:d6:27:46:85:06:c1:2f:1e:fd:77:7a:df:ee:92:d0:
e3:06:4a:2c:bd:8e:0c:40:62:e5:db:6d:88:2a:82:e3:ff:6f:
00:9a:bf:64:bf:d7:48:67:03:30:60:7e:e1:5e:aa:58:0b:c4:
eb:94:48:f3:22:9c:41:45:a4:d7:df:25:36:01:f9:b6:1c:fe:
61:b0:7c:27:b0:27:85:c4:6a:8e:a1:85:48:ab:f3:0a:97:dc:
40:87:6b:30:58:03:5f:15:5f:7f:2e:fc:e7:1f:06:f8:a2:dd:
d4:df:92:b9:2d:63:4c:a0:36:cd:47:9c:5f:1d:dd:aa:3d:f6:
c5:6d:1c:be:1a:31:80:f2:1b:4c:0e:b2:0e:dc:10:be:f3:1a:
ac:28:2b:30:38:f2:aa:38:d7:36:78:57:f5:43:7a:ef:c0:60:
d9:3e:b8:a0:26:e4:c4:d5:3b:6e:65:26:8c:3c:f2:91:29:76:
3a:96:7e:76:5e:1b:93:1e:fc:52:f8:83:e4:88:97:6e:7d:22:
98:3b:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:23 2025 by rpki-client