Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: kBY593SVyOfzD03ognegemnnRgYLR0gdhh8DuC/gRdQ=
Subject key identifier: CF:43:8A:49:FD:FA:73:C8:5B:64:CA:6D:F5:9B:0B:D5:B6:4C:B3:95
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 0195E1595BA498F1AE0990C96162BCBB387F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0B43
Signing time: Sat 29 Mar 2025 10:01:24 +0000
Manifest this update: Sat 29 Mar 2025 10:01:24 +0000
Manifest next update: Sun 30 Mar 2025 10:01:24 +0000
Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: JcOyrLu2g5GK4a/OsEx1sqi0GG+6V2tua5DASQQZSBY=)
2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:5b:a4:98:f1:ae:09:90:c9:61:62:bc:bb:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Mar 29 10:01:24 2025 GMT
Not After : Mar 30 10:01:24 2025 GMT
Subject: CN=cf438a49fdfa73c85b64ca6df59b0bd5b64cb395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:17:8e:06:51:c4:47:bf:25:87:78:3a:a1:
b3:b8:bb:04:02:83:b3:54:75:b4:7a:36:30:d2:30:
14:c3:8c:dd:43:54:96:f2:12:17:bd:01:2e:9d:e6:
5b:e3:99:ac:28:39:3a:52:aa:52:e6:c5:ad:01:05:
50:1b:62:84:4b:f9:ab:43:de:0c:88:e2:ff:df:1f:
be:73:02:5c:6a:2e:3d:ad:2c:71:f9:3e:b0:bf:e1:
92:5f:14:b5:65:46:ce:c7:fb:1b:2f:ff:6e:4d:d6:
16:af:25:2a:97:d0:da:74:48:04:9e:84:f8:ee:9e:
62:51:45:5b:47:44:93:4c:88:07:21:75:71:08:0b:
69:1c:c4:06:d2:ff:39:81:84:97:5d:cf:75:a3:39:
3b:1b:66:09:24:bb:16:f7:3f:5c:31:64:9a:b9:68:
e7:8e:f7:00:0c:4b:23:cf:3e:4a:b1:e1:aa:9c:db:
53:a3:54:00:99:4f:b1:91:50:4a:4f:a6:1a:ae:7f:
8d:79:c4:54:2a:06:5f:ba:de:ab:3a:94:9a:ab:7d:
79:02:58:4d:dc:39:2c:35:c4:30:3f:a2:97:60:0f:
7f:ce:6b:da:e0:8a:ad:b9:40:6c:bb:a5:ec:f0:7e:
2c:f4:41:31:58:63:0c:cf:3b:58:66:52:73:4b:cb:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:8A:49:FD:FA:73:C8:5B:64:CA:6D:F5:9B:0B:D5:B6:4C:B3:95
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:52:56:0c:78:fd:6f:c8:02:06:7e:76:98:98:18:71:24:
e7:b7:a0:bc:4c:15:4c:6e:2b:95:37:c3:19:f9:dc:82:35:e7:
5c:fd:05:b5:00:ed:5b:1e:e7:13:f0:8c:27:9b:be:0e:56:37:
8d:9e:95:fa:05:cb:a7:25:13:84:ba:44:be:a7:ad:1e:b9:e3:
6b:80:a8:5e:db:1a:fc:90:1d:82:b5:12:3b:18:67:b4:ff:a0:
9f:73:b7:52:37:ee:61:a9:4d:8e:c8:96:84:ba:af:b1:ba:21:
04:6d:f3:94:a5:83:d3:d0:94:c4:3f:d5:4b:f8:ac:4e:12:ee:
ca:07:de:40:41:fb:d2:8b:a6:b1:af:25:85:16:cd:50:5f:ae:
ff:27:29:f1:62:45:74:bc:c0:43:98:8d:5e:4b:00:db:12:c4:
88:a3:2b:df:52:44:e7:fc:f2:d4:d8:fc:cc:1a:33:92:8b:4d:
8b:ea:f8:b8:37:c9:6a:a5:fe:88:ae:80:b7:2a:09:02:97:70:
fe:c5:39:21:f3:52:d9:4c:0d:d6:83:77:21:32:f6:f5:78:31:
b3:3d:6c:20:db:ed:92:d5:24:03:0d:8b:27:21:84:00:de:74:
61:75:43:1c:b4:36:73:37:63:41:4e:22:36:d7:06:3b:c2:90:
f3:03:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:09 2025 by rpki-client