Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File: aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier: lvQWkzd8EiwABW7T4Gj+NULM3g/+xqkOiPEa8sapuDY=
Subject key identifier: CE:15:30:A5:FF:C5:DA:FB:1F:97:78:00:08:3D:99:46:8D:7C:31:75
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 0194BD179AD5BA5DF5810804976C649B45BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number: 0FF0
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 5fzLXhNVN8OPyazFAR8US/zXwlLAQ8SCtVlXAyDymSg=)
3: wfdlsKAAvesnWvTDvia3MLYX62E.roa (hash: /q1g066kiwFYosKzhe1K4+rG1+igVMTmtZs6afix28U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:d5:ba:5d:f5:81:08:04:97:6c:64:9b:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=ce1530a5ffc5dafb1f977800083d99468d7c3175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:3f:1d:8a:1f:68:f7:6e:48:8d:7c:12:82:
a8:2c:fc:53:ba:b0:24:3f:8b:41:f3:13:0c:43:11:
79:f4:dd:c5:af:d9:84:f1:47:3c:d6:96:44:e6:6d:
ed:ad:c0:27:1e:f4:85:d5:ef:44:8d:5c:d9:02:5a:
55:b7:68:da:54:8f:4d:34:31:69:b5:22:07:21:c3:
12:78:eb:4f:69:e8:91:30:ba:64:f5:1e:61:1d:33:
7f:bd:61:be:01:ee:95:b2:04:81:c5:09:a4:20:db:
5d:4e:3a:09:a4:7f:1f:91:c1:f1:21:33:96:89:58:
e5:ab:b6:32:49:0c:e0:d1:d7:77:37:d1:23:12:6e:
0b:23:eb:c1:31:dd:29:d2:28:e0:97:93:bc:d0:5d:
9d:f0:16:dd:ed:90:9a:9e:21:d6:60:f0:1d:11:91:
80:01:e3:63:82:94:54:db:1b:d0:fc:c0:45:c9:46:
74:cb:20:ea:93:c8:eb:cd:7d:3e:4e:c4:81:f4:c9:
2e:61:47:7a:be:8e:1d:88:43:66:a6:a5:a9:99:c0:
86:16:ca:54:b9:66:33:4b:df:7b:38:20:e4:60:45:
a4:a5:3a:52:d9:05:ad:ad:f5:93:c0:aa:b3:90:17:
f0:56:ce:c5:78:bc:bd:8d:72:f0:e4:78:54:39:56:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:30:A5:FF:C5:DA:FB:1F:97:78:00:08:3D:99:46:8D:7C:31:75
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:a1:fb:84:85:8a:e5:7f:18:eb:42:90:30:cf:c0:09:c5:
ef:4d:0a:df:0b:d8:79:74:a7:c2:d3:dd:ea:fd:c9:31:4f:5b:
bc:ab:c1:d0:63:11:74:6d:c4:2a:79:f6:f4:eb:11:57:03:10:
26:2a:30:95:66:52:f1:fc:4e:1b:49:b7:a9:2e:fa:70:12:86:
af:d4:91:fd:c1:18:44:3a:92:7a:f5:e4:a7:da:19:0a:ec:43:
11:0f:19:3c:cc:a8:bd:98:af:3a:86:e1:ed:54:67:ae:ed:cd:
b9:df:04:61:da:24:32:87:ec:37:38:e9:b7:5f:c5:28:cd:60:
7d:74:8f:3b:f7:4d:01:5a:20:09:87:b5:de:4c:a1:83:0d:c0:
51:0e:76:19:4c:fa:a0:c4:44:02:62:8b:e8:12:4e:81:30:3e:
e4:2c:47:93:ae:38:da:9a:9a:b6:ac:11:5c:e5:51:cb:99:43:
da:9d:f0:1b:8b:e4:0e:ce:31:5e:9b:ff:c3:e5:c9:fc:30:0c:
4c:b2:28:01:31:fd:bd:7d:12:fa:b1:48:c6:30:08:cf:62:73:
0d:98:b3:dc:e9:1c:1e:64:c2:08:c3:8b:9d:c7:b3:a5:d9:47:
89:b0:2a:27:60:f0:8c:f5:40:c8:b4:f1:6f:4e:53:46:73:b5:
79:ba:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:24 2025 by rpki-client