Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: TgSx5gEHQF6pJSZxxYOEs15S1AFLN+6o2eQxD1vg92Q=
Subject key identifier: 24:A2:D6:78:93:27:70:38:75:F5:A4:CA:5D:5D:52:5A:2B:E0:19:BF
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 0194BC04FAE676390AE734C9E54198C5C833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1328
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: pYuYVdSHlE7U6ecU1vvpbt244MdRMlNWp9UaXGnOc9k=)
2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:e6:76:39:0a:e7:34:c9:e5:41:98:c5:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=24a2d6789327703875f5a4ca5d5d525a2be019bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:48:ef:2c:79:63:b4:6c:85:bd:56:21:e9:
38:89:82:ad:d8:69:73:c0:20:cf:77:b4:b6:ce:fa:
a0:88:85:ff:3c:89:12:4e:16:94:7f:89:db:61:f3:
64:0c:73:da:c2:42:87:26:0d:5a:ff:32:7a:8e:d6:
d3:d9:15:ec:e8:32:84:95:1b:90:78:33:c0:86:b5:
c1:e9:9d:c1:e5:38:5d:20:e7:c0:ca:e5:7b:38:0e:
62:81:0e:e3:1c:1a:a7:f6:10:ba:a6:9e:c0:66:e7:
62:68:51:03:f9:fb:33:14:00:6e:f5:2e:66:62:db:
41:69:a4:f6:1d:69:17:ef:37:ad:67:b3:fa:8f:c9:
1c:ec:f9:17:25:e7:a1:95:1e:fd:b9:f1:df:20:ae:
95:05:41:79:f4:62:d2:9b:e0:79:4d:a2:3b:78:04:
86:d7:74:99:f3:e9:91:0d:ad:a3:1e:3c:a6:02:05:
93:8f:e6:43:dd:c5:4b:5c:97:a9:2b:63:ee:d5:05:
c8:91:89:e3:0c:c3:5c:92:55:92:62:d0:f7:43:d6:
77:a0:f7:26:9b:0c:fd:df:67:74:0c:5e:69:dc:23:
b3:fe:8d:1d:d4:6e:cd:5a:dc:c7:49:ec:f5:d1:94:
72:4f:1d:7f:7c:63:66:63:60:90:92:0f:c3:37:f2:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:D6:78:93:27:70:38:75:F5:A4:CA:5D:5D:52:5A:2B:E0:19:BF
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:54:06:73:32:28:d4:af:18:a6:64:41:e2:85:37:ea:bd:
0e:c6:9c:1f:a2:72:e6:c9:e2:cb:c5:3d:2b:25:a0:1d:f5:78:
be:a3:6f:68:79:9d:57:2a:a7:e0:59:f0:3e:76:ec:9b:d4:59:
a1:05:6c:9f:51:62:8c:3d:59:db:fd:a2:2a:ad:81:ca:e7:5b:
99:b3:20:d4:90:67:85:b5:b5:5e:4a:96:94:40:e6:1f:4c:ed:
aa:b7:1a:26:e2:22:c3:7c:fe:57:df:3b:99:fd:6d:77:f6:44:
94:86:d7:d4:93:96:e7:93:74:62:0f:30:0a:e1:b9:ce:d0:17:
ad:32:8b:57:fd:b0:e9:c5:91:da:4b:79:cd:81:9c:4f:f9:60:
a3:a9:5b:0f:a0:e9:a7:21:95:7c:6a:7d:b9:0f:46:ac:0c:1d:
60:6d:b2:85:02:96:ea:db:d9:7b:8c:08:69:4a:07:53:ff:fd:
ff:ce:2b:77:44:c1:d8:83:35:13:3a:04:d4:2c:9e:35:63:f1:
81:24:58:6b:88:09:ad:bf:03:29:dc:61:d4:7d:27:f8:11:e9:
49:d2:54:a5:43:79:4a:57:f6:8d:66:c5:03:91:dc:2b:2f:00:
2e:36:83:04:83:e9:c9:a2:3c:82:cc:fa:2c:90:29:64:ed:6c:
87:13:d1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:38 2025 by rpki-client