Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: USo249cfa9J6GMEllZmD/AhootxqVZYEU5aURcDF33M=
Subject key identifier: AA:FA:D9:F3:1D:F0:FA:5E:86:D1:39:C1:95:CD:BF:3F:B5:62:9A:9E
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 0194BC0505BC7FB3CC3508999AF44AB77BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: mRzAXe0IXODq+xCyfvIh6YHZq34HPf8TTiSM1LpgYtc=)
2: zDiyPljIfQJSHZqDPkKU2sChvrg.roa (hash: y+GAtv4wxCnxVitUPOmEF1JPji3zVCOq+ijeYGfAYfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:05:bc:7f:b3:cc:35:08:99:9a:f4:4a:b7:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=aafad9f31df0fa5e86d139c195cdbf3fb5629a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:1d:09:7a:7f:0d:8c:55:63:3a:83:cf:cf:
70:04:e6:cd:41:13:6e:b1:a5:d5:e3:33:73:1d:03:
db:88:dd:51:77:64:9a:28:c1:dd:91:f3:6f:16:ff:
45:0d:1f:cc:45:33:4d:c2:f3:4b:5c:35:d6:df:b3:
83:50:7c:ad:8c:72:2d:7c:69:e2:69:3f:2a:a8:3c:
cb:c8:ff:61:ee:3e:06:bf:5c:7c:3a:05:3a:51:b3:
00:09:4c:c3:d3:d3:76:cb:51:fc:ae:6c:ad:00:10:
05:ce:52:2e:e5:bd:8b:ef:97:24:2a:3d:ee:c3:76:
cc:45:be:0b:65:b6:2e:3f:d8:f7:69:7f:69:0c:e0:
5c:3c:05:dc:31:ed:e0:55:9e:31:bc:02:7c:2c:54:
fa:0b:42:c2:6b:8e:16:6e:58:50:b2:41:fa:37:7b:
70:5b:a1:89:09:df:33:52:84:f1:39:54:b3:1d:5a:
40:cf:d4:80:21:33:34:25:39:81:d8:c9:ae:95:32:
2f:44:dd:02:f7:c6:1c:19:7e:d1:65:63:37:30:de:
57:40:b5:77:60:56:d3:90:ca:e8:e8:46:3c:78:46:
d6:cf:09:27:6b:37:dc:0b:96:4c:76:c0:72:83:b3:
2a:4e:2f:6c:6a:66:5e:78:cf:c6:2e:17:a3:a7:a9:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:D9:F3:1D:F0:FA:5E:86:D1:39:C1:95:CD:BF:3F:B5:62:9A:9E
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:72:de:8b:33:38:ba:59:f3:c5:8c:39:de:80:19:b2:94:65:
33:5a:04:32:0f:7b:88:d4:ef:9a:30:4e:6b:8a:70:a7:56:76:
68:3a:80:12:76:bb:45:cc:82:3f:4c:2b:bb:e7:be:77:1f:6b:
1a:56:1b:a4:15:9d:15:84:fa:7d:ee:76:47:a8:eb:0f:42:87:
6b:9e:ce:b8:10:d5:f2:e8:a6:ab:83:a3:d2:d7:61:b4:1c:ad:
ff:35:30:b0:38:c5:36:40:75:a8:76:70:97:69:10:99:da:51:
0a:76:79:ff:61:d6:90:8a:4d:4e:56:5a:a9:ac:d9:36:2f:bc:
f4:28:60:ad:2d:07:37:28:ed:5e:15:f8:d8:87:8a:1c:42:f4:
10:cb:83:e7:a9:f2:28:32:f2:0b:7a:6a:cb:88:73:17:5c:59:
4a:9b:17:45:83:2e:aa:40:58:4e:22:9c:23:60:2b:81:0d:cb:
03:ef:9c:af:75:79:3c:c1:fb:e1:d9:59:cf:70:70:40:79:de:
ab:15:77:c5:e8:cd:37:ef:84:f5:8c:a3:1b:c9:bd:51:41:b0:
31:f5:e6:71:bc:46:f1:a0:56:a9:13:6b:9d:a1:c8:ee:66:dd:
39:a5:a8:53:a7:40:71:f1:da:e9:f4:2a:cf:2d:16:38:e3:c9:
ab:03:1e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:18 2025 by rpki-client