Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: VwyycDh6qEyAkTIBxBT4Y3ybuzcYxhmT+fXcYv8tI9U=
Subject key identifier: 6D:79:90:3A:07:8C:9C:93:DB:4F:64:0F:E4:0F:12:28:40:3C:8D:CB
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 0194BC3C1F72279D92D68FFEB4DD65961856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: 3HV3MXMsU2wFB1WmmDJXAypSbBQisVSw4fait71MM2Y=)
2: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (hash: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1f:72:27:9d:92:d6:8f:fe:b4:dd:65:96:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=6d79903a078c9c93db4f640fe40f1228403c8dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:f0:19:54:b5:e2:aa:67:a2:98:b4:8b:5e:
a7:c2:8d:5f:bb:50:27:15:49:e0:4a:cb:92:b9:13:
ce:8a:58:5e:b7:7f:20:bd:07:6f:91:de:51:cf:28:
29:9f:1c:91:f2:43:38:25:84:93:e2:34:53:d1:6e:
a7:88:f3:1f:80:32:1d:be:db:d6:2e:c2:64:d6:d9:
fa:ad:65:f8:45:2a:4c:10:0b:6e:e9:e7:48:c0:2f:
64:12:1c:91:62:6a:0d:95:d5:a6:23:a4:ff:37:90:
d5:d8:75:08:80:35:66:83:60:cf:f0:9a:6b:75:b4:
7e:ae:c4:34:5e:5a:5a:2e:cb:61:9f:b0:d8:84:ed:
38:55:f7:62:7c:dc:03:1b:2f:d9:be:a6:1b:9b:f4:
c9:2f:87:cc:29:69:ba:e6:d4:ff:93:71:64:5d:21:
5b:87:7a:be:66:66:9f:85:bb:ba:36:5e:f1:a7:c8:
58:08:8b:d0:86:64:f5:ef:5c:ae:c1:76:d7:10:0b:
3b:83:9f:a4:81:a9:eb:a8:3f:c1:02:77:25:93:91:
35:f6:5e:11:c9:6e:c7:62:12:aa:b5:ab:7f:b7:21:
65:f8:58:65:3b:e7:07:62:5a:bf:56:06:99:32:05:
6f:7c:a6:b4:61:40:8d:a1:da:30:2f:07:79:f4:d9:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:90:3A:07:8C:9C:93:DB:4F:64:0F:E4:0F:12:28:40:3C:8D:CB
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:b1:5a:00:64:cb:e7:d8:79:1b:2e:9d:d4:34:af:43:a4:
31:a4:c9:25:2f:bc:d5:6a:ec:ea:57:52:28:0e:bb:b8:6a:4f:
f0:74:e2:ec:d1:06:00:93:e6:bf:df:f5:f3:f8:b0:8d:98:49:
77:52:53:13:89:26:ef:d0:a8:c6:31:4b:50:ee:ac:e0:9c:e0:
8b:25:64:fb:94:01:40:cc:49:37:49:1e:6d:e4:b1:83:64:f1:
33:f2:a4:34:62:88:77:02:42:18:3a:7e:4d:48:1f:f0:ab:6f:
e4:b4:29:ba:8d:88:21:7d:0d:c6:9c:9e:81:93:af:68:79:2e:
0e:08:8b:cd:f0:82:3a:79:89:1d:b4:d6:37:fd:d4:d4:e8:4a:
11:bd:96:2e:44:4b:f6:c3:37:33:84:5c:4b:6e:e1:79:43:ff:
69:39:17:8f:4b:75:6f:40:f4:44:85:4e:e0:b4:75:ca:21:cd:
54:e4:09:55:39:4a:d6:f1:3f:9f:c1:a5:80:79:4d:dc:01:66:
9d:ea:45:b2:1a:dc:1a:4c:bb:18:bb:e5:21:a6:3a:83:ee:8f:
c9:b2:1d:bb:38:9a:75:2a:9e:52:cf:d7:7e:ee:b6:28:70:1d:
07:d9:42:e7:56:0d:07:bc:d6:bd:e4:77:94:4a:f4:03:58:c4:
cb:9d:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:22 2025 by rpki-client