Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: NvwRyBUop2z/Y2x/QoDrtmgnbqIrKZuO3e7PoFxRvnQ=
Subject key identifier: 7E:E9:73:BE:81:F8:53:E3:B2:CA:F2:D2:56:F6:60:B6:46:CF:F5:9D
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 0194BCE093DF4D61468918DA31CA20DDCCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0DC0
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: aTyRvyI1SFXbxyatMgHOpEWASJEbIqSbLm29J3vPmeE=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:df:4d:61:46:89:18:da:31:ca:20:dd:cc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=7ee973be81f853e3b2caf2d256f660b646cff59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:34:4c:92:60:42:af:e8:75:e3:7f:77:1c:
cf:f1:82:0e:d0:f0:56:9d:8c:19:b6:9e:fc:d2:b7:
4f:ca:91:0d:5f:cf:56:91:79:05:ff:87:54:6a:e0:
60:2c:ff:a4:1c:79:d1:75:72:4d:44:3a:c6:48:80:
e9:92:b4:26:57:ab:38:e4:03:dd:61:9d:81:5a:58:
3f:39:73:3d:c8:19:99:29:65:1a:28:ee:be:75:77:
bf:a1:7d:09:86:06:0e:60:29:00:43:2a:fe:e9:8f:
35:28:c0:19:f3:6a:df:82:f8:48:77:74:b6:1f:79:
db:71:bb:ae:3a:cf:7b:d1:fc:50:5d:a5:86:97:e5:
b0:ab:7e:a4:3e:04:d5:b0:33:0e:7b:c1:c2:0c:f9:
71:72:c9:10:ed:10:dd:19:f6:be:03:77:60:5e:51:
29:08:e5:07:f0:5b:55:e5:f2:17:59:2c:46:bb:ea:
fa:11:44:7a:73:68:48:22:b4:92:bb:db:4b:02:fc:
47:6c:89:ba:da:88:6f:03:93:00:0b:75:38:7d:86:
06:2a:e7:62:51:88:8c:d6:22:78:9f:fb:3b:d5:25:
4d:9d:2d:1e:b2:96:f8:63:58:19:06:99:a6:5e:47:
c7:2c:be:f7:35:25:e2:20:34:07:1c:31:3c:3d:51:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:73:BE:81:F8:53:E3:B2:CA:F2:D2:56:F6:60:B6:46:CF:F5:9D
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:27:e5:f3:89:a5:d5:bc:b2:e0:ad:56:3a:49:75:a3:47:
d4:2a:82:41:f4:84:fb:e7:9d:3e:77:1f:8d:58:68:ae:12:0e:
f3:84:82:f3:23:fe:29:bc:cf:bf:97:8e:cc:fb:48:5f:3f:16:
04:3f:2c:de:4c:8e:dc:d2:37:1d:75:66:dd:1e:f1:27:a7:22:
f1:7d:ba:12:56:e9:ce:65:bd:b7:f8:e5:ed:ef:7f:c9:ad:a6:
d1:d0:9b:4c:9f:25:ea:6d:d8:0b:98:91:4f:4c:14:d2:7c:4c:
c6:05:38:ac:f3:98:cd:97:80:43:71:27:33:21:4d:65:21:90:
03:af:8d:fb:52:14:cc:86:3a:1b:cb:63:48:4c:d1:58:a9:0e:
a7:cf:e0:6e:58:f2:83:49:f7:4a:48:76:21:04:c8:f0:22:49:
33:93:70:cf:43:09:f5:59:d8:51:75:45:3b:5f:91:ba:27:bf:
d1:6c:82:f1:06:fb:b3:86:25:7a:57:b2:f0:3d:79:d5:4e:62:
45:80:4e:a8:68:aa:00:16:71:62:89:e5:11:a2:70:c2:85:2b:
9d:ba:d0:17:8f:61:a3:87:92:2b:4e:ea:0f:6d:ae:1f:97:e9:
e1:65:04:58:5e:50:e2:e6:56:25:bb:1e:14:6e:6c:90:07:bb:
d5:93:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:32 2025 by rpki-client