Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: cs/uYuh7PCPObG5UMM2M86VML0dOyM27UiG8w4p2GTI=
Subject key identifier: 52:64:B4:93:24:45:89:D2:11:BD:CF:83:2A:88:89:EE:A1:CE:EC:67
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0194BC3C5FBDDB5D58BE7D450E4934E2F48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 106F
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: pm8dfOP3kIIq9YZys2msuektOSzKogP4WnSBvUaz5iI=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5f:bd:db:5d:58:be:7d:45:0e:49:34:e2:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=5264b493244589d211bdcf832a8889eea1ceec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:d7:93:57:32:b2:4b:c8:eb:05:ec:56:c6:
1f:5a:b6:9e:bd:3b:1e:32:d2:c2:7d:30:e7:28:cb:
10:10:1c:dc:85:b7:2c:77:14:9a:4d:e7:9b:a5:89:
5a:c3:2b:55:0b:73:fb:f6:a8:05:4c:6d:56:1d:7d:
aa:9d:6e:57:27:22:80:ad:2f:fb:06:f8:d6:24:61:
4a:98:e8:51:c1:4d:21:c8:52:62:e3:ae:6c:92:81:
e9:92:e0:93:d7:45:d4:76:ee:30:b5:78:6d:be:18:
15:dc:7b:9e:a6:0d:fc:d1:56:99:2f:98:ad:57:9c:
9b:2a:65:74:57:59:6c:54:02:d9:89:15:30:15:0f:
bc:8b:22:4c:47:9f:d2:a1:4e:f6:3f:8e:dc:5f:e7:
d0:19:e6:03:b5:10:07:9c:f9:b6:d7:dd:5a:dd:95:
c7:07:6d:69:ee:f5:a3:ee:9a:1e:df:1e:c0:cb:b8:
0a:07:b6:77:4e:30:70:0c:29:bb:e0:da:04:f4:a6:
e3:8f:09:1c:22:f3:3c:72:35:c4:d8:d4:aa:d1:ca:
63:b9:07:a7:ce:df:fb:e1:90:01:bd:ea:db:d9:ec:
99:1c:7f:b7:af:16:ea:23:a4:70:71:e1:64:17:7a:
47:ad:3f:c4:34:39:d6:24:86:83:c1:ff:0d:1a:c1:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:B4:93:24:45:89:D2:11:BD:CF:83:2A:88:89:EE:A1:CE:EC:67
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:91:dd:da:45:3e:52:0c:b5:2d:a1:bf:14:1f:71:dd:ea:0e:
b8:70:b0:21:62:56:e1:d7:bc:9f:92:b9:8a:5e:d6:df:c9:03:
31:6b:34:a0:13:15:f1:16:f6:c6:3a:7a:55:b1:d7:3d:6d:99:
6d:6b:bd:0f:9c:72:d5:72:57:7d:18:88:07:62:e3:4b:80:6a:
76:1d:18:9b:73:16:52:5e:34:a6:f4:82:51:b2:98:49:a4:69:
f4:5d:95:e7:10:67:03:29:15:fb:d0:60:4b:44:64:42:b6:a9:
f1:a7:4d:f1:f3:88:b8:f8:ba:b6:db:fa:a3:c9:4d:62:3c:13:
1e:cc:fb:ce:d2:7a:bc:1e:0e:01:40:28:5b:11:74:2f:02:5c:
73:11:69:b5:79:e4:fa:fb:af:71:25:02:99:9e:dc:56:69:6d:
76:ce:57:62:e6:ae:59:82:3a:d4:08:ad:ea:bb:10:62:78:ff:
27:b2:4c:40:0e:05:71:0b:2d:f1:08:da:1d:a7:8f:7a:fa:7e:
8f:df:86:d6:b2:44:93:e5:ec:01:29:a9:b3:01:78:20:29:48:
61:9f:34:18:7e:7b:a4:52:38:7c:39:b1:03:5c:a7:22:82:62:
76:26:6a:d5:fe:73:0e:20:3f:52:e8:49:6c:35:9e:09:20:7a:
2b:a0:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:47 2025 by rpki-client