Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: 4gstfI9f9thT3vlDsom4U3OOOJEvC4pverxNKfdgyU4=
Subject key identifier: D3:BE:FD:A3:FA:14:A3:2F:5B:55:39:D2:45:CC:82:D3:B8:EC:1D:E2
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 0194BC3BC29A6400E61AF417913D395BAB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=)
2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: qM5LXVCQVxXw+exusK+hf1DhOKBfripJrSy+iZHh1W4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:9a:64:00:e6:1a:f4:17:91:3d:39:5b:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=d3befda3fa14a32f5b5539d245cc82d3b8ec1de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:fa:67:f7:f8:17:63:ae:8c:04:ff:96:04:
a9:3c:2e:aa:7b:2e:7e:69:9e:8c:2f:6a:a1:63:b2:
5c:b1:09:a4:da:97:68:1c:ff:b0:4c:9b:0f:b4:77:
3d:82:a8:b2:bd:bc:3f:0c:51:7b:9b:6a:9d:eb:8f:
9e:58:7e:61:69:35:e7:86:29:9d:68:61:b7:72:b5:
63:67:ed:e7:de:8e:08:70:87:28:22:6d:c2:68:57:
80:a2:5c:e0:b6:ef:24:8e:f9:49:c3:ed:10:9d:c6:
35:cf:9b:29:f5:03:7e:a0:6f:78:56:94:45:e9:b6:
fb:d4:2f:ee:38:bb:26:81:da:62:9f:6e:82:df:c5:
54:15:64:2a:93:13:8b:c1:96:d8:97:8e:34:83:1c:
f7:0d:ed:be:f6:43:71:ac:bd:15:80:20:a6:74:e2:
4d:e6:21:fa:87:15:3a:27:f1:53:9b:37:af:a3:ff:
85:4a:ed:ab:6c:b8:af:96:31:aa:d6:f7:29:9d:d3:
69:fe:17:88:e9:1e:78:44:f2:26:fd:00:aa:f0:e2:
65:39:9e:60:a2:04:dd:66:af:0d:cb:4b:a5:8a:ff:
3e:ac:2e:a6:18:08:cb:03:4c:70:d6:6e:03:e8:8f:
cd:a1:a5:82:cd:51:bf:af:b0:f3:4b:85:6f:48:2e:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:FD:A3:FA:14:A3:2F:5B:55:39:D2:45:CC:82:D3:B8:EC:1D:E2
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:45:ea:41:18:59:35:32:36:de:dc:91:f0:03:3a:0f:fd:
49:e1:7c:30:d9:a2:12:70:9c:ee:be:9c:a5:78:7d:82:da:78:
d6:68:2e:cb:2b:de:d5:1f:22:0c:cf:81:fc:f8:e4:6c:46:a3:
17:4f:e1:e0:54:35:9f:53:ea:c0:0d:c1:f0:12:58:b9:49:92:
fe:a9:b2:20:be:e1:ca:af:14:37:db:f4:2d:1f:86:38:1e:20:
8a:ef:b6:0b:50:c9:7c:5c:ea:f3:76:6a:85:7d:4b:6f:28:a1:
e8:f6:11:57:a2:3f:89:77:8e:bc:b8:6d:b1:fd:86:84:44:96:
9d:ff:e4:65:d3:df:c2:97:a4:d5:59:64:e4:52:58:6f:12:e4:
d3:15:b5:18:56:08:35:f0:07:c6:8a:11:ed:fc:9a:66:40:b9:
7b:fc:2a:83:a6:fc:59:af:cd:89:48:a1:47:45:24:2a:27:77:
3b:51:99:a3:53:9f:3d:80:71:51:ac:31:ec:6a:e1:8e:65:67:
77:b4:b1:8d:46:e5:1b:4b:af:72:5c:46:38:e6:89:ac:94:32:
b6:db:95:ad:f9:22:40:50:3a:0f:37:10:47:78:89:82:46:38:
b3:bb:20:01:8b:86:11:75:72:c7:e8:db:45:58:01:5e:2e:cb:
7b:27:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:26 2025 by rpki-client