Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: UfGXwBBPvLf11VBrV5P8T5Udbcu1xxiGJnUBVNPXrXM=
Subject key identifier: 02:22:83:B9:8B:7C:56:F4:D7:6F:90:59:00:BE:02:83:1F:05:F7:EF
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0194BBCE03849C5C5AE6DA61E9EEB84C92B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: 0J0S5DlDtXkrQyOzNdMBdtp4aJ4ISsNAfrE4530cNCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:84:9c:5c:5a:e6:da:61:e9:ee:b8:4c:92:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=022283b98b7c56f4d76f905900be02831f05f7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:bf:9b:6d:a0:6c:93:33:e0:39:a3:9d:ab:
e6:21:ae:e4:32:42:4b:ee:c3:73:1a:f9:2f:97:f1:
fc:a6:48:91:f0:4c:d0:87:48:ce:cd:73:d5:a7:97:
2d:26:20:9a:d2:e0:99:0d:61:19:f2:59:27:c2:7d:
f5:f1:cc:28:d3:1b:86:86:06:ae:ae:16:df:95:81:
b1:32:2a:91:17:50:43:76:99:c7:f1:a9:83:4a:29:
25:cb:4c:ef:ba:f0:67:15:9f:8a:90:2f:8d:be:43:
85:1e:85:09:fb:43:8d:50:b8:0e:fe:6c:a2:28:ae:
80:06:9b:d2:fd:4c:43:b3:78:24:e7:2c:b0:1f:98:
ce:b3:1e:5a:a2:9d:e4:5b:6f:3c:93:12:31:0c:a0:
f4:98:df:0d:39:dc:0b:f9:48:ba:77:23:64:c7:df:
65:3f:94:42:8d:fd:0c:38:44:2a:47:5e:24:47:d8:
48:4b:b5:10:de:d1:7d:93:8c:1c:79:d4:f5:83:10:
84:85:3f:09:63:de:ca:2c:77:4f:1b:a0:09:74:ba:
e0:8c:60:c7:d2:d7:2b:a9:d9:b1:90:56:82:82:77:
a3:ce:4d:67:3f:e0:97:eb:7b:ba:f2:96:97:92:79:
c9:7e:d8:9d:0f:3e:7a:e4:a1:e8:45:5c:25:f9:25:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:83:B9:8B:7C:56:F4:D7:6F:90:59:00:BE:02:83:1F:05:F7:EF
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:19:67:14:d0:7a:c7:50:4e:27:bf:ab:62:9b:4e:7e:ea:b6:
1f:1a:4d:fa:a2:8f:80:9a:c9:92:6c:4c:c5:26:b7:40:c9:75:
09:9b:70:66:44:22:da:56:2f:f8:47:86:08:b7:63:9f:b5:17:
dc:82:b4:4c:34:f9:25:94:af:bb:07:ee:33:e6:db:65:76:c9:
e9:21:70:73:11:56:d5:ba:28:4a:6d:e8:9b:53:c6:8f:c6:cd:
70:61:41:1c:66:dd:97:91:9d:c0:62:c5:ea:33:ce:69:4a:90:
d7:62:45:b3:4c:b7:1f:74:12:6b:94:9f:e6:24:9e:92:3e:e2:
c8:df:f1:87:61:3b:53:3b:63:5f:82:dd:d2:0a:b5:bb:a4:f6:
ef:cd:59:e2:8e:5f:4a:4f:9a:8b:bd:fe:f2:41:6b:8e:d0:e3:
ef:cb:19:7d:7b:7a:38:fb:bb:4f:1a:74:06:d5:05:0e:15:8b:
8a:48:63:90:8b:ea:b8:ad:a6:98:aa:d6:43:ee:f7:f7:02:35:
ef:d3:6d:79:2d:33:31:55:69:f1:d9:ee:bd:61:f8:af:ba:89:
be:fd:df:17:06:29:d5:bc:e8:e4:3a:48:21:88:1d:09:0b:b9:
10:98:5c:4a:b5:af:1e:33:3e:f5:e3:86:ce:cf:16:7c:d8:b7:
44:ba:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:02 2025 by rpki-client