Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: y/jjg6t8R0oJA/CFs4ltNNy/yUC3h1c9d52LIa2snZk=
Subject key identifier: 9D:10:A0:7A:FD:9D:13:64:4C:92:99:17:ED:B7:7B:EC:47:3D:16:AF
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 0194BD4EB998C8439057A0F220622FDA8270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 05F5
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: o3hGnqEc6zbVhrQEpfkyewQxgwtgPhgkRBW6YY9Lq54=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b9:98:c8:43:90:57:a0:f2:20:62:2f:da:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=9d10a07afd9d13644c929917edb77bec473d16af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:a7:b8:fc:38:53:03:01:bf:53:5e:8f:82:
d0:f6:8d:ce:0f:df:92:4f:e4:9a:43:9c:87:fd:7b:
04:3a:b2:f7:dd:a2:3d:8e:ad:fe:c9:68:0c:fc:77:
be:1a:ca:49:2b:cd:51:fb:80:66:57:db:4e:38:8a:
43:88:c8:dd:e2:2e:c3:94:03:09:99:57:ae:eb:47:
43:b5:d8:6c:b3:1e:07:89:e1:dd:fb:41:cc:f9:c0:
58:08:8f:3b:76:20:3e:33:01:fd:9f:9b:61:dc:57:
d4:0e:ef:55:63:e7:f3:d4:43:87:38:8a:7e:d0:f2:
cb:80:c7:e1:be:14:41:7c:e6:a8:a9:64:e2:fd:5c:
7e:3a:fe:57:04:50:28:39:9d:2b:a7:ed:4d:86:42:
2e:33:0b:a2:aa:7a:ad:e3:97:fc:03:f6:09:83:0b:
ea:b2:48:35:8b:0d:6f:cb:5e:0d:e4:d5:ca:88:22:
be:66:54:92:3d:6e:82:35:ec:bc:a0:01:82:a8:b6:
52:af:9d:0e:e0:e7:d9:30:15:c4:19:45:17:c2:01:
c2:2c:4a:61:51:40:db:40:f4:38:74:30:32:10:e1:
f7:56:4a:fb:11:a6:67:75:b1:bd:cd:56:d1:f7:ef:
dd:d9:c6:d6:b2:0b:43:82:49:e9:11:ce:1b:75:f2:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:A0:7A:FD:9D:13:64:4C:92:99:17:ED:B7:7B:EC:47:3D:16:AF
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a5:ae:2b:d5:ef:34:3d:d5:92:a4:82:b1:f0:f7:9f:d1:8b:
26:b7:73:f2:e5:65:90:fd:7c:8c:cb:8d:cf:71:f0:96:5f:e0:
04:10:71:cb:69:49:f5:15:02:73:52:ee:b3:fc:f3:83:b3:2c:
52:85:07:47:c9:19:0c:1e:1f:fe:d6:94:a9:22:21:b3:7f:9b:
5e:2d:c6:76:55:93:29:65:0c:37:99:0b:ee:47:d2:23:1b:09:
04:b7:95:3f:7b:b9:fa:f1:34:b7:46:48:67:6d:69:a7:8a:58:
09:96:97:a5:2c:bb:be:62:c6:06:fa:73:51:93:1e:c1:b4:a7:
9d:16:d5:16:49:fc:53:36:09:2c:40:45:1d:5a:e1:97:6c:9b:
1e:a7:ca:e7:d9:36:b6:c6:a6:bb:29:9f:45:e3:59:5b:51:6f:
07:28:3d:6a:bf:e6:1c:e2:8a:0a:33:5e:c7:eb:c2:32:d8:06:
a4:e3:bf:69:34:e9:28:d2:c6:be:21:bf:11:1c:99:88:db:f1:
a5:d6:5f:39:60:48:c3:7d:2b:20:11:60:66:14:34:af:91:e2:
fd:3e:4a:bf:8e:3a:27:ee:c6:41:66:c0:cb:df:6d:c3:59:f3:
78:8a:13:33:75:61:31:d9:9a:18:8f:06:f9:c2:84:85:37:09:
ed:8e:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client