Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/aPaR6YUykgtJ9jz4SlCaGzyowPA.mft
File: aPaR6YUykgtJ9jz4SlCaGzyowPA.mft (raw, json)
Hash identifier: xzbGZbjABlsDlGLSfMj0yij4suRhepvsyWaYH+JmHTI=
Subject key identifier: FD:E3:D2:7F:E6:E2:DB:09:1E:6F:90:5E:85:B8:DF:F9:ED:81:E8:57
Authority key identifier: 68:F6:91:E9:85:32:92:0B:49:F6:3C:F8:4A:50:9A:1B:3C:A8:C0:F0
Certificate issuer: /CN=68f691e98532920b49f63cf84a509a1b3ca8c0f0
Certificate serial: 018BB8B4C8E2D84881BF2EF9E0FDFD936A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPaR6YUykgtJ9jz4SlCaGzyowPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/aPaR6YUykgtJ9jz4SlCaGzyowPA.mft
Manifest number: 09C5
Signing time: Fri 10 Nov 2023 10:08:57 +0000
Manifest this update: Fri 10 Nov 2023 10:08:57 +0000
Manifest next update: Sat 11 Nov 2023 10:08:57 +0000
Files and hashes: 1: aPaR6YUykgtJ9jz4SlCaGzyowPA.crl (hash: vwctLx59hT5gv/iAnO7IeKBlPAJAHK2uUD/9kW56qbw=)
2: rEh_278UPa08TcuBDg69iUFyIG0.roa (hash: 8X+LSKHRc72FwFeH5my3G70omYOKSoXeWlGbYuq+sIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:b4:c8:e2:d8:48:81:bf:2e:f9:e0:fd:fd:93:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f691e98532920b49f63cf84a509a1b3ca8c0f0
Validity
Not Before: Nov 10 10:08:57 2023 GMT
Not After : Nov 11 10:08:57 2023 GMT
Subject: CN=fde3d27fe6e2db091e6f905e85b8dff9ed81e857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:9c:58:23:4d:b9:a3:1c:8e:4c:3d:8c:e3:
15:0f:ce:63:97:67:ac:87:40:fa:d1:6b:ca:2d:7a:
7f:50:24:16:27:db:58:d7:0d:be:27:d7:e2:21:e1:
0b:c7:76:6c:f5:a9:fc:51:88:a4:23:1d:27:6e:4c:
97:2c:eb:1b:43:9c:a7:b7:e2:d3:89:9b:d4:da:79:
e4:09:5d:70:e6:d9:14:5f:fc:ee:0f:f6:f3:4e:c2:
07:b6:cd:b7:d2:d8:fd:3f:cc:f7:3e:ab:cf:52:5e:
aa:22:2d:d0:76:37:ca:ca:a3:8b:84:ca:21:08:64:
d5:cc:ad:e5:8e:f5:35:28:c7:4f:c2:d7:7e:d5:e6:
2d:1d:37:41:10:9a:68:4f:a2:40:d6:49:e1:cb:de:
9a:af:ca:a7:95:78:5c:40:07:45:1e:21:cf:bc:5e:
56:96:af:16:50:0e:ba:74:4f:33:08:93:3b:4f:eb:
86:05:c0:30:e1:5e:9d:8f:fd:6f:80:63:76:6d:1f:
99:d1:74:34:6c:a7:26:5e:39:32:06:89:58:e3:38:
33:e2:56:9b:cf:71:be:cb:de:5b:4a:a1:5f:7c:68:
c4:a4:de:ac:7b:d1:53:92:17:d1:a3:16:2a:2f:b2:
ae:9b:68:01:b9:bf:47:0d:6d:4c:80:c7:a6:12:8a:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:D2:7F:E6:E2:DB:09:1E:6F:90:5E:85:B8:DF:F9:ED:81:E8:57
X509v3 Authority Key Identifier:
keyid:68:F6:91:E9:85:32:92:0B:49:F6:3C:F8:4A:50:9A:1B:3C:A8:C0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPaR6YUykgtJ9jz4SlCaGzyowPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/aPaR6YUykgtJ9jz4SlCaGzyowPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1875ac-a274-479e-a676-b025f4003943/1/aPaR6YUykgtJ9jz4SlCaGzyowPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c6:84:84:28:3b:0e:51:2a:e9:7a:3b:1e:20:dc:e7:20:cc:
c4:1c:a0:30:eb:df:27:ff:f7:a0:c8:6e:89:2b:a9:20:db:59:
52:6c:76:0b:d0:f8:db:ed:9f:fb:85:88:2b:b6:ef:26:c0:9e:
d7:74:ff:0b:13:b1:3c:af:7f:bb:3b:d1:bb:dd:d0:8c:7d:ab:
36:4f:0c:20:43:bc:48:58:41:93:6e:c2:81:24:88:5d:66:02:
80:24:12:4c:06:85:d9:9e:ac:44:53:4e:fd:85:0c:e5:8c:c7:
71:71:f8:9b:f1:40:68:4c:30:ee:6f:6a:66:bd:9f:29:60:2b:
34:56:26:3a:a3:63:ac:18:ab:66:4c:88:1e:0b:b4:6a:dd:1e:
e6:82:0d:b4:b6:42:84:f2:0b:13:b9:ce:d7:9c:2e:74:6b:c5:
75:e8:d4:52:b5:66:8a:3b:b1:39:ba:25:8c:41:86:89:bb:ba:
19:60:db:ad:3f:23:a9:da:7b:e8:f0:32:0f:a5:52:e9:76:ba:
ea:7d:d9:31:b8:77:e4:c0:68:1b:7b:96:c4:ed:db:fd:4d:01:
47:15:2d:c8:05:22:4e:0b:5f:1f:d3:a0:62:6f:8e:95:8d:63:
e8:6d:b7:67:ec:20:b9:6d:11:25:02:83:ff:eb:75:af:a9:fb:
85:df:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:58 2025 by rpki-client