Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: lqQRXOuZ5JqPD6qpO0gm8xP8zrejx+vt4SaUxsvHy5I=
Subject key identifier: 0E:30:EE:18:C9:BB:F3:A8:DE:05:2A:1F:5C:A2:1A:C5:CA:12:B8:54
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 0194BD4EC9AF179B3C3E8E1F8B370082A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0914
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: PmNNh4IzjSd56x06odS4Ddk5m4GlBFsjFfcwYP8oeBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c9:af:17:9b:3c:3e:8e:1f:8b:37:00:82:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=0e30ee18c9bbf3a8de052a1f5ca21ac5ca12b854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:b1:9a:1e:3a:dd:3e:ad:f9:3c:e0:6d:56:
c4:0a:d3:c9:26:07:ab:7d:0d:2e:6b:5a:1a:61:50:
60:ac:ea:8d:32:46:85:ae:c1:49:03:52:c7:c3:32:
ea:31:11:38:e4:cd:69:a9:7e:7c:ad:06:a0:29:61:
7a:4d:34:09:a4:3b:78:6b:1e:68:52:7d:ef:32:05:
07:12:ff:2f:e0:d9:06:57:ae:f1:cf:b5:7c:a8:6f:
7c:b1:2a:8f:27:69:30:9c:e9:e6:2c:eb:66:1c:0a:
6f:d4:1e:c1:2a:ab:9b:a8:f1:32:b1:ce:4e:31:87:
6b:15:20:ab:10:d1:37:3f:06:aa:bf:74:8a:12:c6:
9e:3f:f9:f9:5b:0d:0c:47:11:98:0c:03:f0:5b:be:
13:4c:69:91:0b:9c:15:b8:2e:74:99:19:a5:b8:37:
d6:89:97:06:d7:9f:e9:13:1d:a1:fc:38:ac:5b:0f:
fd:df:3f:71:52:73:5d:8c:09:02:7e:bf:1a:4c:1e:
a7:39:62:d8:73:46:1c:7f:50:00:e4:61:05:f0:c4:
27:03:40:df:f7:ba:b9:bc:9e:23:a3:32:48:25:9b:
00:c1:7b:c9:ed:3e:18:6d:88:60:2b:7a:5d:7d:65:
d8:94:2f:94:66:dc:12:ee:8f:1b:5c:c4:c3:40:16:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:EE:18:C9:BB:F3:A8:DE:05:2A:1F:5C:A2:1A:C5:CA:12:B8:54
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8b:04:89:2d:c4:42:ae:22:00:53:a7:3b:33:e8:1e:63:b5:
c9:b9:d7:31:c9:6a:70:d4:55:a5:a8:cd:64:4c:e4:40:56:7d:
af:5d:a9:bd:17:57:bf:9f:23:46:06:f0:4f:5f:24:82:d2:9c:
c7:45:c6:1e:d3:d2:1a:73:c9:bf:ea:01:07:6a:b0:69:c3:37:
84:98:71:44:66:52:67:7c:77:dc:7e:b4:a8:28:7a:43:e6:35:
bb:00:9e:d8:48:b5:23:0f:58:92:fa:6f:88:d4:c3:4d:65:39:
48:5a:98:29:23:73:61:25:32:4d:19:ed:5d:3e:07:6f:a7:9a:
05:52:bd:44:f8:c9:61:03:17:56:e8:b6:49:fc:41:ef:ec:86:
50:b3:a1:71:38:1d:60:74:c1:87:59:b8:25:d7:94:97:95:ef:
47:71:b7:6d:ec:34:10:ed:01:3f:38:46:ce:17:ac:98:b2:33:
51:f7:eb:3f:ad:8c:ab:86:dd:b7:49:95:43:5f:b1:f8:d4:01:
42:68:7d:0e:69:24:6b:63:fe:c6:f9:e5:99:0e:aa:27:0f:42:
4b:c6:80:3a:9e:58:f5:18:88:ac:83:8f:21:87:ee:40:4f:10:
2a:eb:2b:f0:16:7a:37:e7:3c:cd:32:f5:cd:4a:47:99:3d:ec:
dd:90:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:53 2025 by rpki-client