Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json)
Hash identifier: B2IR4nMFh9Rx5ZiUK3LMyf1lnCozJtMQLzsL9mWvLHg=
Subject key identifier: D3:1C:23:62:FE:60:AA:39:61:95:A2:B6:DF:E8:11:A3:19:31:EB:09
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 0194BD4EBCC94BC770B2461A9E7D11DC4E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
Manifest number: 10D9
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: tFqfV0YbyxgJ+mrlGq/LakUL5oW1hP4JTKSuTxxRvkA=)
2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:c9:4b:c7:70:b2:46:1a:9e:7d:11:dc:4e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=d31c2362fe60aa396195a2b6dfe811a31931eb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:af:25:10:ab:d9:c7:ca:07:7b:e4:bf:f5:
1f:de:0b:ae:22:30:de:92:f0:f3:82:93:c2:08:d3:
a0:53:e5:81:4e:c1:55:73:7d:73:d6:59:98:d7:b6:
11:2d:4d:49:7a:74:a7:2f:b9:69:1b:32:5f:8a:00:
0d:c3:0b:7d:55:c2:a8:24:d6:45:d7:66:e3:27:b6:
51:38:ae:3a:3a:41:84:13:1f:87:30:1e:60:29:8f:
cb:de:d4:8e:97:b6:d3:5a:e2:ec:42:b5:1b:37:e7:
62:36:7b:de:9e:e3:f1:19:14:b1:af:64:9c:c1:94:
71:41:a1:6c:22:70:7e:bf:32:d4:f5:87:9c:1c:3d:
56:3b:79:53:9b:89:26:29:4b:7c:3e:9f:17:0c:c4:
1a:24:f5:85:ff:81:5e:bb:67:cc:dc:26:a5:a2:a2:
98:c0:36:e2:5b:61:a5:5b:b2:9e:fe:15:ee:1d:4f:
a8:1e:5c:34:c7:4f:ea:b8:f7:22:64:f2:10:a9:39:
de:fd:9f:ae:a3:3e:a3:d4:77:b9:71:f9:cc:7d:9e:
34:60:ee:21:32:3f:c8:44:a8:e0:ae:27:62:d2:ca:
c7:98:27:ec:15:2c:17:48:84:c5:f7:83:35:43:a3:
8b:a0:06:e7:24:0b:d1:f6:7c:1f:ad:3d:c7:a1:a8:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1C:23:62:FE:60:AA:39:61:95:A2:B6:DF:E8:11:A3:19:31:EB:09
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b5:52:62:61:1d:56:0f:de:15:6a:1a:59:bc:28:68:c7:df:
e0:fd:49:2a:eb:de:e9:a7:61:03:c1:ac:6b:7f:2e:46:0e:8d:
87:df:31:b7:7d:c2:98:06:4f:17:31:04:83:27:c6:78:98:45:
b9:6f:16:3e:e4:5b:8a:06:49:9b:f1:f4:dd:f2:5f:c7:9b:0f:
e2:43:3b:75:ee:24:c5:32:84:2b:fc:7b:64:b8:e6:0b:80:95:
d1:74:46:e6:f2:0c:96:ac:db:6f:44:42:bc:40:d7:a2:84:d6:
63:76:f1:d8:4c:f0:fe:0c:b4:09:80:2e:50:3d:ac:5c:bf:11:
33:c4:ee:c6:dd:c4:8c:23:3a:7e:8c:cb:94:73:f0:26:a3:a9:
3d:bb:b3:da:1f:a5:5e:47:d1:68:be:23:99:4a:a3:25:0f:08:
bc:1b:c8:03:11:1d:04:d6:38:2d:1e:eb:cb:b3:16:10:1f:fb:
79:21:59:97:b2:e6:6c:58:db:7f:33:91:36:fb:15:9a:cd:eb:
c0:50:9d:43:83:a5:1c:ca:6f:fe:2c:3a:ff:4d:fc:2b:fc:5b:
a9:ad:2c:6f:71:3d:f9:09:52:85:7f:3c:e3:76:04:9f:08:5f:
57:f5:17:cb:46:c5:03:f7:38:12:ca:4e:9d:de:dc:d7:62:2e:
98:2b:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client