Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: LCqgfc46z2uR6wGYApUgpVcxdAcE4m/16JjCMlp1rvs=
Subject key identifier: C9:3E:49:A0:48:78:DA:E6:A6:B1:57:EC:17:E3:4B:94:AC:12:1C:CC
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 0194BD8562FE58687AE08F9AFAD29E657D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: tOMvIU40c4QLGwUEmdi922iTvPP0ZaDC4xGa2QLaH24=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:fe:58:68:7a:e0:8f:9a:fa:d2:9e:65:7d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=c93e49a04878dae6a6b157ec17e34b94ac121ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:06:00:57:a6:2e:8f:a7:6f:99:fc:8c:a2:
70:78:18:43:97:fa:db:2e:c3:ed:64:9d:7f:0b:7f:
97:b7:1d:f1:63:9d:b2:34:3f:a9:af:4b:b4:f2:3e:
6f:85:fa:23:d8:93:40:d5:5c:8b:cf:13:d5:cb:3b:
3c:97:a6:35:23:b5:c6:3d:e0:92:1d:82:f8:94:b5:
72:07:55:12:ab:fb:dd:b3:d5:0c:a1:74:59:cf:12:
93:da:ea:58:4d:72:6d:e9:e5:6b:72:64:68:b2:ff:
7a:3c:5a:27:12:12:de:8f:b4:17:aa:a0:1b:3d:0c:
63:c9:fa:26:b0:5d:e7:22:9f:ab:d2:32:bf:07:e4:
14:54:48:c8:82:1f:e1:18:75:7d:87:93:8d:0e:47:
22:20:f3:eb:7f:0f:73:f0:b4:47:7a:e9:ce:86:2c:
92:4c:af:c8:f0:86:6e:51:8a:2a:f9:7e:76:5f:76:
a9:9c:cd:94:b6:72:0c:4a:06:8f:27:a9:79:60:6c:
bd:65:51:5b:40:9c:94:46:10:1d:a3:ea:18:69:3d:
8a:f8:ca:a7:32:8e:42:89:86:bb:bf:a6:97:19:ad:
3b:9a:9c:f5:72:7d:36:74:25:14:e4:6f:8e:5f:db:
65:63:6b:2c:fd:2f:ff:2c:94:ea:d5:04:c5:6e:a5:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:49:A0:48:78:DA:E6:A6:B1:57:EC:17:E3:4B:94:AC:12:1C:CC
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:83:3b:26:53:0f:60:71:85:60:c1:98:65:0a:c7:b3:38:
d9:83:14:71:1b:ee:ff:ad:af:97:65:d4:58:39:50:ee:d1:53:
24:55:d4:e6:48:54:0a:c7:35:e8:df:48:d6:c6:c1:50:a6:69:
97:6f:d9:a3:b6:09:d9:bb:18:5d:8f:e8:bf:95:fc:5f:b0:8c:
bc:68:3b:72:f1:04:1f:b2:73:12:42:02:8b:6b:8e:fd:7e:00:
e0:1d:17:f8:e0:94:45:1e:36:94:53:e8:ba:1e:bb:31:2c:1e:
15:57:a0:4a:a9:79:ca:46:66:bd:d6:ff:c7:39:3a:27:e7:0d:
94:6d:a1:1d:0e:6c:40:50:d8:ee:d2:70:6d:13:92:8a:c1:7d:
86:2e:70:29:f2:ae:8d:42:a2:d3:35:6f:5e:70:73:c4:0a:57:
bf:ab:c0:aa:f4:c7:ea:4b:8c:a0:a7:ec:28:ce:ad:2a:6a:2f:
15:7e:cd:d1:7b:7b:36:1f:86:43:96:04:27:57:82:b7:66:c9:
9e:09:50:3c:52:db:6d:fb:14:8e:12:b5:f2:d7:8e:aa:db:d1:
d2:23:dd:e5:6d:2a:91:51:f4:45:ab:e7:72:18:e4:6f:37:d7:
b3:b0:20:c8:90:96:11:cc:9d:45:ad:55:33:d9:ef:4d:ae:8e:
ee:02:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:40 2025 by rpki-client