Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
File: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft (raw, json)
Hash identifier: ze2BKHXkey1x71kK2cqModfag9M1dAFQ6tJSeokhIHc=
Subject key identifier: 76:77:C5:28:8D:2C:53:21:C5:91:60:E1:BB:36:7B:21:85:CE:BC:AA
Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Certificate serial: 0194BC0511AECBEF69B9A01A2A14303F9752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: YixLFlfODucpz3SmvGUoO943czQ.roa (hash: U+vdy0unHKQkRcci4HnKyZFl5mHyggPlDsq3RNujwyk=)
2: aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl (hash: 7EoriG5OrZXZtyDqWUpXGaoZAR5aP9moWm9I0vpBBHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:ae:cb:ef:69:b9:a0:1a:2a:14:30:3f:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=7677c5288d2c5321c59160e1bb367b2185cebcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:b5:90:3b:21:5f:13:e7:7e:42:3f:4c:79:
f4:04:a5:9a:9e:4a:a8:dd:56:e2:5b:fc:8e:a1:14:
77:ac:3c:93:01:33:fc:cf:de:ae:e0:55:d8:9d:3e:
7d:f5:33:a9:5a:b3:2a:83:18:63:e9:86:f6:b8:2f:
b7:e8:1e:85:15:c6:2e:38:c1:63:18:1d:34:47:17:
e2:b5:8f:8e:13:cd:33:e3:1b:50:cd:46:46:65:6f:
ee:36:de:cb:92:ee:4e:77:75:b2:a5:30:25:e7:53:
c0:b7:b7:25:f1:7a:89:a4:43:63:30:37:5d:34:16:
c9:75:af:a6:b3:46:70:6b:46:f0:25:60:67:11:72:
79:ef:56:e9:8b:9b:86:36:79:f9:1e:40:a8:98:4e:
f5:9e:ba:2f:89:41:2f:6a:b0:28:df:c0:f8:15:8a:
f0:43:b4:0f:9a:c7:f2:cd:3d:5e:39:1c:92:32:30:
4e:01:ae:c7:d6:24:a4:f1:78:c4:fb:64:6d:e3:2e:
d3:82:c9:5b:5f:46:0a:ef:ac:2a:ea:ae:66:da:f2:
65:ed:6d:19:84:dd:1c:8e:2e:80:02:5e:1b:12:04:
f4:a6:fd:ae:d3:ee:9d:12:df:cb:e4:1c:62:27:d3:
da:8c:fa:d7:40:5a:be:82:f2:dc:48:20:93:58:9e:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:C5:28:8D:2C:53:21:C5:91:60:E1:BB:36:7B:21:85:CE:BC:AA
X509v3 Authority Key Identifier:
keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f7:0e:ae:60:f2:a0:7d:3f:55:73:df:b8:75:3b:99:27:67:
07:e6:a6:0f:c4:67:67:99:82:3d:4f:a6:3f:6e:57:2a:a8:1a:
e7:78:3a:86:45:65:6c:33:c6:82:df:e3:2a:ba:f3:2e:28:29:
71:89:67:21:11:76:cb:8a:71:df:7b:17:b5:c1:91:21:67:1d:
57:85:06:83:b6:43:3f:ae:23:6b:91:87:22:54:c5:3b:29:0f:
c8:74:c3:93:f9:3f:1a:39:e9:12:f7:3e:cb:6d:34:d5:f0:e6:
98:8e:61:5d:9b:19:79:38:a4:96:d8:f6:03:25:77:63:60:1d:
e8:22:20:5f:22:6e:52:f2:3b:5f:b6:10:9b:01:76:5a:26:cc:
e6:bd:f1:40:e8:39:2a:4a:7b:04:2b:88:1c:94:1d:95:a7:f7:
56:88:4b:9c:f0:90:0d:72:b9:d0:20:77:19:73:1d:0b:9b:33:
63:43:1f:a0:41:33:36:bc:18:ca:96:ab:81:c4:3d:48:84:11:
2f:52:98:9b:51:83:59:55:fc:e9:2f:27:53:59:10:2e:72:69:
27:85:13:cd:21:c3:6a:7b:b5:1f:9a:4a:1d:22:59:99:f0:0e:
05:69:aa:83:9a:4b:fb:ca:c2:74:61:e6:2c:66:a4:2d:04:ea:
50:1d:72:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:57 2025 by rpki-client