Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.mft
File: aAEhsZmykd53Y9jByqezzcNWGBA.mft (raw, json)
Hash identifier: 1wAy4rWDN33G9QOycqk70qj61AY2a1AvtEAhgCvya/4=
Subject key identifier: 31:FD:FD:D8:E2:5D:4D:6D:29:9E:33:ED:27:37:01:D2:1A:78:15:44
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 0192E196E2F0A41DA76EB81C2E20362A185B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.mft
Manifest number: 0AAF
Signing time: Thu 31 Oct 2024 08:00:15 +0000
Manifest this update: Thu 31 Oct 2024 08:00:15 +0000
Manifest next update: Fri 01 Nov 2024 08:00:15 +0000
Files and hashes: 1: 2MQH2kgzZx-iz0uzyQvjNP6NZKs.roa (hash: 6psrdA3QAHlOiAt8PxOccfZJ3IkT0VS11C37ojgqkDg=)
2: NLQArFSOQLDpcVGzf58DJdkdlUU.roa (hash: /TmgVjTIxyABlObSGd3XMWr6X/DH1iQc1TLSe/DAie4=)
3: aAEhsZmykd53Y9jByqezzcNWGBA.crl (hash: lVmIffBZHS3xhXnQkWDMF9tIqi4EvcsqArCQ9QoEEKE=)
4: tbvXMTTdSL6j9mjbPEShhptkxhs.roa (hash: bSqJDNr4i6x7IW+KKwQCVD/vW6ll2MmLrzn0Ik0wXGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:96:e2:f0:a4:1d:a7:6e:b8:1c:2e:20:36:2a:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Oct 31 08:00:15 2024 GMT
Not After : Nov 1 08:00:15 2024 GMT
Subject: CN=31fdfdd8e25d4d6d299e33ed273701d21a781544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:42:6d:6c:4a:6a:cd:23:4f:0b:b7:f7:4c:55:
d7:aa:b9:5b:14:f0:42:70:ff:26:78:0e:e0:44:e7:
87:6c:07:cd:5d:a0:a0:a7:2e:8c:74:79:b5:09:ce:
05:e8:93:d4:b5:c0:d2:5b:5a:7f:d6:3b:32:80:38:
3e:31:ce:ac:d7:29:53:14:ba:78:90:2f:90:72:61:
24:34:a5:c3:44:d5:b6:35:d3:cb:96:83:2d:a9:6f:
ae:09:60:45:af:24:6f:ea:da:42:14:d6:1b:7e:cc:
a0:f7:78:49:cb:d7:7d:a2:3b:f0:cb:af:db:9e:8f:
c5:b2:67:03:eb:92:ac:6a:c7:1e:13:1d:42:e2:1e:
ff:06:06:77:f1:84:c4:a4:b7:b9:b2:1a:6b:62:9f:
d5:3d:cd:20:c9:d7:a6:58:fa:73:91:0e:0d:ec:47:
ea:67:82:24:ed:b1:95:3d:d6:1a:df:55:d3:04:46:
c7:1d:b2:79:40:58:dd:4b:c9:50:bb:8c:23:af:89:
68:a3:c5:99:69:1a:52:3a:ae:56:b7:1c:09:80:a1:
93:b2:d3:a5:27:1b:42:9f:29:53:4d:1d:98:ab:08:
f4:68:ad:96:5a:3f:a0:c6:7c:42:a3:d6:9f:82:e0:
b2:a0:0f:b9:04:48:c3:a6:06:4b:58:a3:5f:7b:36:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:FD:D8:E2:5D:4D:6D:29:9E:33:ED:27:37:01:D2:1A:78:15:44
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:ed:ee:b3:ab:fa:fc:38:67:65:ea:00:73:64:1b:77:c4:
80:81:76:3b:82:43:28:95:50:fe:e0:97:af:66:71:02:b4:e9:
fe:6b:dc:7d:f4:39:f9:6d:15:51:30:28:88:2c:52:7b:78:9c:
65:c8:7c:9a:0e:1f:6e:09:64:a7:ef:3f:69:4d:a7:22:28:37:
8c:9d:12:3c:ad:f2:d8:73:cd:28:35:ea:83:1b:0d:db:08:e1:
b6:2f:39:9f:44:a0:d9:cd:d9:c1:26:22:46:99:8e:96:00:cf:
0b:30:55:ea:29:f1:f1:f8:9e:a9:12:03:f0:42:b7:14:46:9f:
93:ad:a1:c1:7a:ee:56:ff:86:b4:bf:43:4c:fb:26:e2:0f:ab:
fa:01:79:ef:31:12:c1:86:66:21:cb:31:d4:79:7d:15:86:54:
62:30:54:38:cb:69:70:f6:5d:bc:c8:03:7f:b9:7e:4c:a6:d8:
de:ef:f4:a5:d5:e0:40:41:ef:4f:ba:ee:22:b4:e5:d6:e4:ae:
f9:f2:ad:dc:e3:1d:e7:05:74:19:ec:cd:24:3b:a4:a5:ae:c5:
96:8a:f6:70:3d:57:fc:10:cb:dd:74:6a:36:15:cd:55:fe:54:
59:cd:ff:fe:94:51:96:50:8a:e3:3e:42:aa:ec:f8:f2:3d:ba:
f3:b3:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:00 2025 by rpki-client