Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: RmqCyZNVw321il0E4HJfU7zPiizuW2jQi4h1+e8KmOA=
Subject key identifier: 84:9F:14:DA:AF:DB:B6:15:E4:0E:80:2C:F7:DB:C3:B7:8E:A9:D1:BC
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 0194BC3BF27D7C9B490CDB52D261C27A1FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: K6nzqIbgKOWfXmvznQ9UsbDvVk9kMfkMDbmIbz7lu5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:7d:7c:9b:49:0c:db:52:d2:61:c2:7a:1f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=849f14daafdbb615e40e802cf7dbc3b78ea9d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:44:de:75:cb:00:b9:a9:f3:e5:c8:d6:37:
33:be:af:c6:17:79:d6:ac:39:cc:e0:ca:a6:f4:11:
4e:d0:97:92:2e:69:aa:55:3a:9e:3c:44:e5:3c:1b:
e8:00:89:08:a3:38:cc:1f:a2:d8:a3:5a:4d:e3:c6:
9b:c9:2b:b1:98:96:15:0f:f6:39:1d:9b:03:80:e4:
94:a2:47:27:4d:e7:bd:f1:bd:0c:b0:e0:a2:19:1e:
36:d6:55:53:54:69:c3:59:31:72:d8:33:d0:ee:06:
55:0a:51:6a:48:6c:17:06:e3:f1:a7:1f:47:74:89:
9e:e0:0b:1a:80:16:64:86:4a:4c:35:58:46:f2:4d:
0f:91:e4:68:16:08:ae:c1:0c:8a:62:bc:06:b1:13:
7a:01:e5:65:bc:be:f3:2f:0e:fe:a6:fa:17:1d:0f:
98:14:a2:ed:85:c0:db:f4:08:44:08:d7:e6:10:61:
fa:f1:e1:be:84:ca:7c:57:97:c3:f9:64:93:97:a8:
bd:63:1f:33:f1:2b:d1:3d:31:9a:a6:72:42:90:78:
b4:6c:d2:c1:5f:c1:30:74:99:43:5c:ab:3a:05:c2:
fd:4c:65:96:a1:37:30:67:4d:31:4d:d4:e4:f0:0f:
14:d4:c0:19:49:3e:72:69:cc:6b:10:6f:e1:4e:f6:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:14:DA:AF:DB:B6:15:E4:0E:80:2C:F7:DB:C3:B7:8E:A9:D1:BC
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:fc:df:76:88:56:60:d0:04:26:ef:3b:6a:9d:42:0c:a9:
34:02:ff:53:b7:95:97:45:01:78:09:1f:7d:2c:1e:b1:8b:aa:
a3:a6:26:d4:11:6e:4a:e2:27:bf:97:64:23:3c:c6:72:32:0d:
ed:40:ad:c0:e9:f4:4b:28:b4:68:dd:0a:6b:1d:7c:63:6b:23:
21:e5:08:49:9f:11:68:cb:c4:72:bc:69:d4:67:99:c4:3d:7f:
98:30:75:ad:70:46:f1:01:71:ff:24:c1:0c:15:0e:4f:ce:61:
04:07:e9:22:b4:69:e7:14:f3:d7:e9:f6:4e:29:37:b0:7a:74:
34:36:da:8c:bf:94:11:79:cc:08:6f:a4:49:d7:1e:8d:68:3e:
84:3d:2d:a3:70:a7:de:40:55:eb:5e:5e:bf:8c:1c:77:5e:8f:
64:71:65:7f:5d:cd:3b:63:32:13:38:30:3d:6d:e8:fc:94:40:
94:45:83:f9:1d:cd:2e:e7:28:3d:09:b4:57:b6:35:1a:4f:06:
82:0e:8b:2c:19:46:b4:b2:e5:cd:94:73:ef:26:14:a6:99:4b:
4d:b9:96:39:79:0f:dc:d1:11:3e:1a:83:64:96:8b:7f:a3:5c:
ef:d0:d9:49:2c:a3:54:d3:0d:92:68:d5:2d:ea:e8:09:c4:1e:
f6:b8:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:11:48 2025 by rpki-client