Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: 0hdg5iuENmnbQgWqO+4fGo54hxoHX+vJNjfDQck+I6k=
Subject key identifier: 73:85:02:2B:6E:1B:44:4D:C9:C3:BD:45:74:B2:88:5D:FF:41:B5:23
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 0194BD853CBB5E1B460B655E08B705DAD134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 01EB
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: vAtFCQH1zMmQnYUyqbrbfuPHlY1rWvrL9gGU+cDupdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3c:bb:5e:1b:46:0b:65:5e:08:b7:05:da:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=7385022b6e1b444dc9c3bd4574b2885dff41b523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:d4:42:5a:f5:b8:0f:74:82:d9:8f:0a:9c:
ad:b9:f3:88:00:b2:ec:00:c5:e1:5d:35:14:84:04:
13:a0:43:a1:f7:42:d3:77:c3:e6:a5:2a:26:ce:e0:
03:05:76:c3:cb:69:89:04:80:4f:fe:c3:9c:19:c4:
d6:58:1e:19:c4:45:23:67:44:c0:f7:cf:33:4c:91:
d1:da:1d:32:6a:23:c2:ff:cb:cd:9a:5b:77:b1:08:
7e:ee:e1:da:a9:71:92:c2:91:09:bb:00:f1:77:98:
78:05:cf:81:8d:5b:fc:75:de:7b:7d:8d:60:86:78:
bb:5c:c6:fe:4d:49:f9:75:5d:e3:19:fc:01:a1:ff:
45:35:1b:78:b2:4f:db:aa:56:60:64:c3:38:b1:c5:
06:46:ab:96:f1:3e:83:8b:c3:63:05:13:14:5e:af:
ff:d9:63:8a:3a:98:8f:8d:2d:0b:fd:62:4f:19:cf:
2d:75:94:34:e9:7f:c2:55:df:ec:d0:61:f4:ce:99:
21:60:15:0e:2b:3b:b7:84:31:dc:94:67:9a:af:78:
8b:91:9c:99:09:06:a1:16:4d:02:40:5a:35:73:69:
9b:ff:72:a7:24:0d:a6:ea:c0:70:88:88:01:1f:4c:
e1:11:1a:64:5c:14:bf:66:9b:fc:95:20:47:7a:19:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:02:2B:6E:1B:44:4D:C9:C3:BD:45:74:B2:88:5D:FF:41:B5:23
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:09:78:ae:47:d7:da:de:ac:bb:25:b3:14:f5:81:7e:0f:01:
5a:02:d4:5d:8d:5d:92:d1:ec:6d:d6:dc:d5:54:86:c3:b2:10:
8e:82:b0:32:d9:8c:b1:3c:72:f0:4b:2e:57:11:56:38:64:0e:
22:dd:b3:87:c5:98:2f:fa:5b:30:8b:12:01:f3:50:8c:ea:cb:
c3:57:31:86:db:91:21:16:85:28:17:f7:cc:4f:ef:d3:7b:87:
ac:f8:1a:9e:66:b9:49:56:bf:b4:17:2a:99:7b:0b:e7:bc:1e:
29:b1:a4:bd:3f:d3:e9:8b:f2:61:a5:c0:8f:96:7b:a3:59:6a:
ef:11:43:48:12:57:bd:1b:8d:62:70:65:97:a1:e7:ea:14:f0:
3e:84:0d:c3:8e:a9:b3:88:5c:dc:84:91:04:2c:5c:3b:ed:60:
a1:a5:8c:f3:6e:ff:ce:73:97:70:2b:b4:24:e3:d1:f8:f8:f4:
d7:82:a7:14:ff:75:7b:1b:fb:1c:58:05:ad:ba:64:2a:c5:01:
81:6f:aa:f9:32:51:6b:d5:1b:09:d8:e6:98:fa:f4:9a:43:ca:
73:69:7c:88:28:5f:fc:ab:4c:bf:ff:3b:fd:dd:8b:73:b3:3e:
02:9f:29:42:45:1c:bb:4e:6b:ed:b1:3d:94:d1:98:e2:6f:02:
87:72:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:42 2025 by rpki-client