Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: hzpDPvyg0rvfoNv/VrcoXHLplksLEV3KAWlRhENlpyU=
Subject key identifier: 9B:9F:5E:AB:A2:E2:AF:30:45:83:37:8D:1A:1F:12:F3:ED:C3:6E:99
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 0195E046F674508B95BA35C10917DD59E887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 05:01:41 +0000
Manifest this update: Sat 29 Mar 2025 05:01:41 +0000
Manifest next update: Sun 30 Mar 2025 05:01:41 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: JCOTr8/CbxTHFiXFdVeCxbygpc528xwnynTKVhd0Bbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:f6:74:50:8b:95:ba:35:c1:09:17:dd:59:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Mar 29 05:01:41 2025 GMT
Not After : Mar 30 05:01:41 2025 GMT
Subject: CN=9b9f5eaba2e2af304583378d1a1f12f3edc36e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:a0:10:97:e9:4f:93:ed:92:71:41:6f:39:
85:3c:34:3e:86:9d:9b:bc:6a:40:38:f5:ef:55:71:
5f:14:f9:30:b5:47:a2:1b:58:3d:49:d1:98:94:8a:
c0:5d:23:e7:5c:0b:d3:38:2a:4d:f7:90:0b:56:b0:
ba:04:0a:68:60:2c:e4:50:9d:0a:99:aa:8e:94:7e:
ff:c7:a6:be:35:57:45:19:b6:9c:d8:4d:ad:5c:f0:
f1:ff:ef:2e:90:22:96:4e:9e:70:fc:36:b8:6a:a8:
3b:75:52:fe:1b:cf:59:ce:f4:ec:01:2d:f9:96:e9:
af:c0:2c:fc:bd:16:86:1f:03:04:a4:ef:39:9a:6c:
c9:be:6a:15:c2:c4:9b:af:b5:a2:c0:22:9d:cd:11:
c9:cb:8c:27:e6:60:10:9a:80:c2:8e:cf:74:e5:aa:
51:c8:80:c7:f0:24:6f:d6:af:eb:0e:32:a7:39:98:
df:6a:50:cc:b3:e0:47:a9:33:1d:b9:e5:2f:44:78:
fd:0f:a6:b5:c2:d9:da:ca:0f:14:24:a5:fc:cd:35:
d6:b6:58:43:e3:f4:39:fc:92:ec:4d:ae:1a:7b:2f:
d3:4c:d1:14:0e:6e:98:da:b8:fc:1b:6e:6e:34:23:
8d:19:34:66:0e:1f:81:ab:d4:67:b9:99:c4:2b:77:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9F:5E:AB:A2:E2:AF:30:45:83:37:8D:1A:1F:12:F3:ED:C3:6E:99
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8c:d8:bd:0d:30:73:63:6b:64:44:81:42:dc:78:8f:06:b9:
68:09:91:63:79:92:eb:55:85:81:a9:9c:74:90:1b:03:63:6a:
c9:8f:b3:ce:e8:a5:28:13:d3:69:72:e5:0b:0e:94:1e:92:e9:
54:25:60:07:24:3b:de:b3:af:b0:25:32:87:7e:b5:be:01:fc:
63:5d:af:06:62:03:b9:5a:a6:d9:37:51:91:e0:16:61:54:99:
86:fe:c6:8c:62:38:ff:15:26:4b:dc:fd:03:bd:6f:87:03:f1:
37:6d:91:5d:50:79:6a:b2:f7:79:1f:fb:16:d2:48:80:57:ee:
12:9b:e3:fa:49:b1:6b:ad:a3:89:01:9a:d2:1a:bb:68:05:6d:
67:8d:9c:4a:7c:9c:2d:c2:41:40:d4:d7:2a:80:6d:5e:a3:34:
44:05:6e:e5:da:c2:62:44:93:37:d1:f8:d9:5a:80:97:b8:18:
c8:eb:bb:cf:c9:0c:8b:3f:d7:27:f9:41:3d:b7:ff:c7:7b:3d:
6b:70:5a:5e:9f:8c:f1:c3:bd:92:1d:42:28:da:1c:f2:0d:a5:
17:21:44:13:a8:43:f5:70:38:7a:52:57:f7:f8:a7:6a:ba:c1:
0f:ad:20:d1:97:bb:a0:8a:74:18:c3:8b:3d:9b:d4:66:ae:ab:
03:d5:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:13:02 2025 by rpki-client