Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: tDo6ad43TcCa6eVCTqtHZ2TAhNIzfbybTmz0UFc2HaY=
Subject key identifier: 21:AB:D2:53:E7:4D:53:27:95:BF:60:FE:5E:27:1D:AF:AA:66:21:B5
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 0194BC0521EF66164FD7A70CC6B248FF9E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: dX8/s0aii9VrzGMbzI2kk6yo2os5vGi4ZPF0TR7Ozts=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:ef:66:16:4f:d7:a7:0c:c6:b2:48:ff:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=21abd253e74d532795bf60fe5e271dafaa6621b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:84:99:ba:77:18:71:83:b3:ff:ce:2f:90:
c9:d5:1c:3d:b7:d2:40:a3:5c:b0:48:0f:de:6d:4d:
77:50:84:25:d7:5a:59:60:3e:1b:60:1a:9a:c9:f5:
15:5b:af:06:4c:bf:68:ab:91:e2:3f:26:5e:f7:97:
9b:f8:b8:cf:5e:b9:c8:91:9d:5f:5d:59:6d:90:c5:
bb:23:d0:cc:76:fc:d6:0e:95:ab:5c:6d:03:27:d9:
e9:c0:75:c5:4c:72:a7:83:f7:7a:d2:f1:4b:59:34:
24:d2:8b:14:15:12:2c:ac:40:34:b9:a4:9a:2f:27:
64:a8:b5:88:ae:31:34:0b:22:db:9a:f8:01:6e:c6:
36:b6:b6:6f:70:94:3f:43:df:3b:f4:e9:0a:fd:a1:
b7:6b:9c:9c:6f:03:21:c5:07:fc:b1:62:71:c2:d5:
a3:a3:02:31:c3:fd:22:29:6a:38:d6:50:d8:8a:4f:
83:e5:a9:f0:fd:42:b9:f5:bb:28:13:df:52:44:71:
9a:2f:6d:77:6d:8c:9f:0e:af:33:02:12:d7:83:5a:
5e:68:9e:6e:1b:00:6f:5f:ab:b1:4a:12:9d:e7:be:
47:54:33:8d:ec:9f:5f:cc:e8:9e:59:c3:01:88:21:
11:4e:de:52:4a:37:a7:28:c5:7f:72:bb:6a:8e:1f:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AB:D2:53:E7:4D:53:27:95:BF:60:FE:5E:27:1D:AF:AA:66:21:B5
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:a8:5a:ff:73:80:5f:d7:6a:ba:6f:0f:28:18:e2:f9:f2:
ac:50:77:2b:04:d5:ff:fe:31:88:78:ff:40:c9:38:e3:c4:24:
5b:22:e5:32:37:06:0e:03:27:6a:72:15:d4:f0:75:ed:03:23:
37:38:a8:5c:12:13:7c:c1:08:25:a6:d3:46:6a:21:18:8f:1a:
2f:bb:d0:bd:f6:2c:ac:f9:c7:d2:4e:9b:6d:51:a2:2c:5d:bd:
0a:e9:39:59:0f:f9:5f:8b:b0:7c:85:43:5e:7e:67:0f:5d:19:
fc:29:09:25:02:56:a2:38:f3:2f:ef:30:32:8a:42:c1:01:5e:
97:10:9a:e5:f7:ca:c0:4e:58:59:e8:54:59:72:90:09:b6:0a:
75:31:8b:b8:8d:86:40:73:14:34:a1:1d:a7:c4:da:a9:29:1e:
68:fb:74:c0:53:f8:97:f0:5d:a5:d4:e4:9e:6a:03:93:c3:dc:
96:af:82:43:71:2b:f5:42:d1:11:b6:5b:7d:e8:07:a8:5e:93:
65:c5:94:ea:49:e1:ed:4c:a0:20:ba:ac:c5:0d:bd:cb:33:73:
cb:7b:86:25:fd:da:d0:a8:fd:e7:be:9c:3b:ec:06:9c:e8:34:
1e:0f:b8:8d:56:b7:54:22:e5:33:2f:aa:61:50:aa:3a:3b:91:
5c:7e:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:41 2025 by rpki-client