Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: ku6iHgOWfYvuUPKHFJ8ksef91s66lPu3dRksJTFuJpY=
Subject key identifier: 72:99:86:B3:5E:E2:C2:7F:37:11:73:4C:58:0B:C6:4C:59:37:CC:AA
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0194BCE0CF22CD4D441B28626B895920F7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 071F
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: RTu9XxOs41aydeO/EUWWdm3rxKWduDRaiAbzEWm4oaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:22:cd:4d:44:1b:28:62:6b:89:59:20:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=729986b35ee2c27f3711734c580bc64c5937ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:e6:c8:73:cc:ec:01:fb:d7:8a:9d:ce:91:
7d:88:bb:2e:5d:64:89:c3:74:2b:c5:f8:42:b9:5e:
48:31:16:a8:2d:fe:ef:e9:f4:3a:85:c5:1a:7c:47:
5b:65:fd:83:32:2b:d9:b0:bc:68:ad:3d:1c:07:80:
12:27:a1:9e:aa:7d:9f:ae:c2:0b:38:cc:6f:30:10:
c6:cc:67:7a:b9:09:b3:ef:eb:d4:8f:09:76:0b:e7:
e7:7c:48:58:df:1d:ad:09:02:37:30:ef:02:4b:74:
a7:49:e4:a5:b0:b6:b1:f8:34:56:28:d6:36:3e:7c:
d9:28:46:43:5d:3e:a5:83:73:0a:0d:7d:80:21:3f:
fe:0b:2f:ce:1d:4d:8d:9c:48:61:12:70:19:d7:c2:
f5:c1:64:5f:7d:ba:6d:e0:ac:29:40:a6:73:a8:1c:
86:12:67:53:c7:98:9d:52:76:ac:f3:eb:31:d5:31:
9a:8c:1a:d8:c4:a1:fb:88:db:03:a9:75:64:b0:71:
90:0c:9c:cb:c3:a8:87:3d:cf:47:dd:d6:3f:7a:35:
9c:89:ba:ac:05:85:e7:8f:4e:7c:83:11:e7:c8:8e:
5a:21:1c:57:6d:3f:bc:06:6d:e9:c0:6a:01:8e:fb:
86:98:9e:b3:63:ab:08:07:ff:25:6a:c5:7f:a2:4e:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:86:B3:5E:E2:C2:7F:37:11:73:4C:58:0B:C6:4C:59:37:CC:AA
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:ea:81:43:3e:f5:8e:2a:57:da:e5:43:ac:c5:a1:85:f3:
7e:07:c7:3e:80:aa:5c:a0:93:79:62:a4:96:b7:0f:60:e8:3d:
2d:e8:36:bb:2c:37:93:79:b2:6e:98:b1:e8:79:bf:31:6a:65:
d6:1e:ac:08:eb:2f:d8:0b:36:62:e6:1b:b2:47:af:32:03:16:
e8:b8:11:a7:0b:dc:75:4f:53:d5:0e:ba:86:88:34:36:68:5d:
90:22:ad:28:e2:3d:de:f5:96:74:00:8f:64:75:1c:21:38:32:
55:12:f2:c6:21:8e:dd:ea:62:67:2d:eb:07:26:be:97:9e:4e:
2b:75:a3:ef:17:a0:81:5c:cf:12:83:5a:bf:81:ad:65:15:80:
ab:2c:02:44:8e:47:68:66:e7:13:f2:de:c8:b2:db:f0:aa:14:
0c:04:93:59:1c:83:b3:f8:9f:a1:0f:83:a6:4c:a8:85:c3:df:
fd:22:a3:87:f5:68:d9:59:97:1a:f1:48:c4:92:7e:95:72:30:
1c:55:fe:79:65:15:24:6e:27:5a:56:79:3c:d9:6c:47:a4:3e:
4d:2b:f2:fc:f4:8b:8f:e0:b2:77:5b:8b:95:bf:df:9b:e9:0b:
25:dc:7e:48:5e:5d:92:4b:e9:8f:68:cf:96:16:20:97:63:d0:
57:39:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:19 2025 by rpki-client