Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File: a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier: PiKCDAG98q9N1sCivn0XG8bRU3CGuG0/Sz6dtM83mdQ=
Subject key identifier: 74:13:C2:FE:25:22:4D:DF:14:3B:08:0B:CB:76:79:55:DB:71:1D:96
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 0195E0EB17DE53A5018888F33C782663869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number: 0D30
Signing time: Sat 29 Mar 2025 08:00:58 +0000
Manifest this update: Sat 29 Mar 2025 08:00:58 +0000
Manifest next update: Sun 30 Mar 2025 08:00:58 +0000
Files and hashes: 1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: wQZiFCKD+ph4QERg6XRpYPqbONzloTPqBMONfNWTTJw=)
3: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:17:de:53:a5:01:88:88:f3:3c:78:26:63:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: Mar 29 08:00:58 2025 GMT
Not After : Mar 30 08:00:58 2025 GMT
Subject: CN=7413c2fe25224ddf143b080bcb767955db711d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:7d:d3:0e:11:df:47:56:6b:50:20:2b:da:
24:69:23:3c:d3:46:ad:70:65:a0:ec:ca:d9:71:b5:
bb:ab:5a:6e:5a:2c:e3:53:48:05:f0:d6:ce:fb:b2:
86:3d:37:95:07:e2:f6:8f:b1:ba:4f:36:a6:b8:24:
77:a5:50:0b:b6:6f:f6:b1:c4:75:cc:f1:45:9a:8e:
9a:9a:93:aa:b4:9d:17:50:14:81:6d:aa:85:90:2c:
82:71:6f:25:55:0b:3c:62:06:a5:4e:b5:3f:49:74:
30:fc:fb:be:36:ac:d8:c7:54:df:5f:28:de:db:5e:
c2:8c:65:92:59:97:39:12:57:e2:b4:5e:1c:d9:02:
5d:be:ca:0c:e4:d0:88:ac:a3:f0:74:2c:43:db:0c:
3c:46:cb:2c:00:25:86:6b:6c:b0:ef:ed:e1:ce:5c:
87:2a:62:bc:e6:eb:c8:64:55:46:ba:74:0f:b5:b0:
08:f4:ce:5f:ee:de:60:2c:bc:f9:c5:f5:f8:67:09:
7c:64:5c:eb:a7:30:ac:0e:09:b3:8b:4f:b0:3f:38:
07:b3:d4:da:6b:ad:9a:d3:c8:d3:9e:b7:fd:41:c8:
24:cf:44:78:05:de:52:e7:1d:e1:9c:4c:cb:ee:6c:
40:8b:c1:06:8e:40:a4:86:15:03:1e:80:95:99:ef:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:C2:FE:25:22:4D:DF:14:3B:08:0B:CB:76:79:55:DB:71:1D:96
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:99:56:8f:aa:9a:8b:5a:39:5a:cf:5f:b1:b9:aa:e2:aa:
6e:ca:dd:1a:27:7e:e8:33:e5:d8:fd:9d:4a:bb:41:32:67:82:
df:ab:5b:5a:88:85:90:fc:45:71:46:91:1e:14:bd:bd:6b:a1:
81:65:9f:6e:9f:85:ab:49:0e:4d:a9:3a:df:05:f9:21:8c:b4:
74:3b:92:9d:46:b3:0a:22:da:c6:e8:31:69:a6:cc:75:13:01:
59:b4:8b:8a:05:45:3f:9a:3a:93:e7:21:6f:28:82:15:3e:fd:
ba:2b:04:af:3b:b4:b3:c5:1c:b4:cb:bb:00:61:e9:3d:d0:0c:
ca:fb:1c:a1:04:2d:db:9d:be:bf:3c:96:4f:a2:d9:83:02:9c:
5b:74:4c:86:e2:2d:9e:c4:b6:69:36:82:bc:b8:f1:c2:10:cb:
04:97:20:9a:12:bb:20:dd:c8:cf:ae:20:a5:b1:80:c5:31:f2:
01:3f:45:a9:83:97:ea:3e:f8:49:cb:d7:5a:10:33:74:10:f0:
91:61:fa:b4:a0:b3:8d:73:80:cd:e0:64:87:4a:5d:51:ff:71:
db:c8:89:ca:96:b7:e1:81:d4:15:53:4d:03:2b:d0:f7:5f:89:
21:90:ce:ec:cc:5d:b7:43:8e:fa:18:8e:81:e4:2d:31:24:8c:
7d:1d:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:28 2025 by rpki-client