
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: SyHMTdUK0SjQwsbmPeDrOXVHNkWTO+ECB2ai4UqJX4c=
Subject key identifier: B0:05:35:05:3B:FD:68:DA:F7:DA:AD:FB:FF:76:ED:B6:85:84:B1:71
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 0194BC3CA6378EAB7594F9718E7996EF066A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 1154
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: YoWOO5739qekxQNFf8PBlZ4j8U+5sgAO+FQD8wWWgwg=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a6:37:8e:ab:75:94:f9:71:8e:79:96:ef:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=b00535053bfd68daf7daadfbff76edb68584b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:55:af:a7:87:10:a4:df:32:b1:08:36:ac:
b5:00:02:85:50:ef:37:72:c0:e7:69:67:35:ce:12:
79:e2:b8:8d:bc:0b:bd:60:89:29:99:b0:66:bf:5d:
6e:d7:f3:e6:f7:4d:2b:31:a0:51:26:84:2c:8f:d1:
f2:40:b3:dd:37:0c:b6:b0:66:01:28:02:e1:90:70:
8c:ce:9f:fb:23:f9:45:ae:d5:da:e4:7a:5c:25:0c:
90:b1:49:0d:1d:67:51:0b:58:a4:52:94:48:cf:9f:
ca:75:ad:ec:81:33:00:f4:81:3b:1d:a8:c1:a7:b7:
10:88:2b:f4:d3:ec:4f:f0:2a:e2:50:11:f3:fb:aa:
0b:e5:61:87:5c:e4:e5:f1:e5:19:d5:c2:18:c2:b2:
8a:5f:ca:92:97:47:00:1c:1d:70:be:15:c2:da:16:
c2:81:e3:ed:3e:f9:97:fb:7f:ed:b7:90:b7:18:60:
be:70:76:c7:67:49:29:ff:71:e9:69:0a:7c:f8:09:
39:48:16:26:37:21:61:3b:e0:b2:7b:cf:9c:22:5b:
1f:fe:e7:d6:22:65:a6:00:34:91:73:40:63:a9:74:
ce:8a:d3:7a:6e:79:fb:e4:6a:58:4c:45:92:43:8e:
2c:13:ee:cc:ed:5d:1a:2c:39:79:c1:09:67:b9:23:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:35:05:3B:FD:68:DA:F7:DA:AD:FB:FF:76:ED:B6:85:84:B1:71
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:82:8e:f0:80:8b:b3:d1:9a:51:89:d4:dc:4e:81:0f:5b:
76:cd:b0:6e:1d:8a:50:0d:03:75:f4:e7:8a:6d:f6:88:15:01:
9f:2f:ae:aa:36:40:8f:1d:f9:2c:30:74:b8:93:af:d2:7f:11:
18:09:70:b0:4c:79:8d:ae:05:97:ae:03:1d:bf:9f:f5:34:90:
a5:de:99:61:ca:ad:95:6c:12:8b:24:ed:45:bb:51:3e:09:38:
32:e3:e3:2e:78:76:66:fd:54:99:f0:2d:6e:d6:18:57:b5:b5:
94:8e:43:a0:f2:07:8a:c1:79:90:93:8c:91:2e:f6:2e:06:f5:
97:e6:51:36:fd:4b:02:87:24:f6:d3:78:12:0a:ee:ca:8d:29:
4d:4f:b4:a0:33:73:f9:73:ce:3a:ef:9c:95:b9:d5:ae:7b:9c:
45:dd:22:2e:f1:cf:1e:76:ff:02:45:34:72:01:57:eb:1d:d8:
26:f6:34:f5:8a:ff:a6:05:ed:96:eb:b0:5a:08:67:92:f1:08:
f6:17:88:16:95:47:7e:80:e8:f3:1e:5d:a4:33:1b:02:00:61:
01:b6:b5:bc:b5:c7:6e:f3:0a:36:54:ff:f6:ce:c1:3c:ea:dc:
2c:58:58:2c:0e:92:3d:fc:ba:ee:cc:e4:82:9f:62:ce:38:27:
68:90:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:53 2025 by rpki-client