Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: 5/yDY9sD+gGoB3tcvblO8HRgEKkBSloQ5I4HpVyiPlw=
Subject key identifier: 25:6F:29:DF:44:D7:64:53:94:7B:83:DF:71:73:4E:D4:16:A1:3E:4D
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 0194BD855292D75F05B0CAF8B25981B614D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 0201
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: koURJZGCN1vOJKf0bTGM37ETNrSzt3fn7kd+mt7j4MM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:52:92:d7:5f:05:b0:ca:f8:b2:59:81:b6:14:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=256f29df44d76453947b83df71734ed416a13e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:68:63:b3:89:ac:ea:7d:13:c6:f1:67:ff:
c6:23:99:f8:84:0c:01:ac:25:d4:01:2c:73:e9:8d:
df:2c:70:f6:af:9c:87:4e:8e:ff:d9:09:a2:2d:02:
48:d5:d8:21:a5:9d:af:da:59:71:47:fb:ca:28:15:
41:c1:22:41:94:6e:68:51:a8:1c:b1:c5:d3:bb:95:
33:b4:0e:1a:b7:82:dd:56:66:e9:90:f0:cc:01:da:
65:e6:bb:1f:45:fe:da:0f:db:e1:da:cb:b3:42:00:
78:b9:ff:20:8f:e3:a2:34:b5:a0:8a:8f:a3:00:2f:
e3:cc:de:0a:3f:e4:3d:28:25:43:be:b4:37:90:2b:
92:c7:67:8a:e9:c9:11:39:20:40:38:49:94:59:ff:
85:57:38:0c:13:db:b5:d5:83:54:03:f5:da:f0:56:
48:47:d1:4d:67:d8:6c:76:e3:fb:f7:b2:36:1d:dd:
c3:b1:6c:a7:4c:ee:35:f4:1f:0a:f6:67:a5:d9:27:
26:17:24:a9:76:bf:6d:6d:b9:74:3d:36:c3:91:cf:
11:c0:4c:6b:87:40:2c:97:4e:3a:52:c2:9c:99:29:
1d:43:43:7e:30:f1:d0:42:2f:77:17:f6:9b:d9:f5:
78:87:54:49:e8:04:89:0b:03:75:b5:65:83:72:a0:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:29:DF:44:D7:64:53:94:7B:83:DF:71:73:4E:D4:16:A1:3E:4D
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:7c:f4:09:87:6f:af:64:86:17:8a:f2:72:50:38:1b:33:
01:04:37:4a:a4:c0:56:81:81:4c:17:bd:96:4b:19:bc:6c:4b:
be:f4:6c:5d:54:97:49:28:b0:62:5a:ee:f7:01:0d:8b:d8:60:
1d:6d:8f:d9:b1:a7:a0:c6:09:65:32:a5:82:a0:c5:71:b0:07:
3e:37:55:90:bc:ea:bd:2d:5a:0d:8a:2f:72:36:93:17:97:e4:
88:13:84:ee:66:a4:84:64:8c:fc:d6:8e:8f:31:fa:5a:2b:92:
c2:06:ca:2a:ae:44:8b:85:9c:11:fc:6f:af:0e:b8:e2:24:db:
7f:10:7e:98:90:86:b1:72:cf:42:bf:bb:dd:35:4e:b9:0b:12:
1d:63:b9:d7:be:59:6a:ed:6f:85:c7:a7:10:d2:d2:af:18:f0:
93:f4:1f:60:fe:96:d8:0e:b5:82:79:65:42:1a:ad:eb:00:b6:
09:90:df:4d:a2:b5:1f:f9:21:e1:65:83:01:cb:39:b7:e0:4a:
41:12:b4:07:db:da:aa:1a:1a:01:4d:cc:9d:6c:3c:44:cd:11:
9d:1f:6e:8e:13:12:c2:a1:9b:57:98:8c:53:b0:d1:b0:cb:71:
ac:18:fc:40:56:09:23:58:80:af:5c:74:c8:d1:d7:2d:02:ce:
96:01:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client