Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
File: ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft (raw, json)
Hash identifier: i5k/7jP+ymDcLxtm5t1BNhyrib0brBGSrpWdr4HMvEQ=
Subject key identifier: BD:0E:1E:88:77:E0:2B:D1:85:8F:FF:2C:BD:C9:65:B1:DE:58:16:BB
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 0194B1A76A613B116A667F01993E129F6173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
Manifest number: 1427
Signing time: Wed 29 Jan 2025 10:42:06 +0000
Manifest this update: Wed 29 Jan 2025 10:42:06 +0000
Manifest next update: Thu 30 Jan 2025 10:42:06 +0000
Files and hashes: 1: ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl (hash: umZL1oW4FW+Wi6AkdLmQrtTs+fumG/ROWsBKGDUY18g=)
2: b_r2wZ6lhJVB6OgNserafUFYM_k.roa (hash: NLA59l5xFaTl4FcplVa+WADlVToc/544GHzzgDmMylg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:a7:6a:61:3b:11:6a:66:7f:01:99:3e:12:9f:61:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 29 10:42:06 2025 GMT
Not After : Jan 30 10:42:06 2025 GMT
Subject: CN=bd0e1e8877e02bd1858fff2cbdc965b1de5816bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:1d:72:38:f1:3c:9d:1d:ca:4d:d0:a5:81:
04:60:23:ad:e8:3b:ac:24:e3:73:b5:c9:d4:3a:28:
cc:05:10:a3:a8:5f:4c:a5:fd:de:4e:bc:a0:a2:ea:
0d:0c:e6:24:78:9d:e6:1d:ff:15:0f:27:78:62:cd:
44:88:27:14:d9:0a:25:e9:da:1d:79:84:f6:37:76:
69:01:a3:83:f0:0c:d3:e7:94:6d:d7:99:5d:10:04:
f1:77:34:f0:70:4b:7a:f8:d4:d8:e3:f7:38:be:5c:
47:43:c3:d3:ec:3b:88:a0:38:f2:38:02:ca:ca:93:
cb:d4:df:b0:57:7d:89:eb:f1:e5:a4:47:02:5e:36:
73:70:99:2d:48:db:0c:b5:aa:07:7a:cf:5e:4e:27:
da:94:ff:57:a9:1f:6b:0e:e0:0e:04:83:19:02:e1:
65:62:48:87:77:41:90:8c:d2:85:b9:8b:85:4d:76:
87:30:ce:9e:01:79:b2:5a:32:80:65:d9:5d:a0:d0:
e0:be:6b:39:80:6d:d1:a8:c5:2f:f7:1e:d3:7d:41:
b7:bb:23:5f:aa:24:0a:78:b1:f1:e8:2d:38:5b:7c:
b9:90:94:56:42:8e:75:3e:31:9f:b7:47:16:56:b8:
71:d4:03:f1:0e:a5:36:00:80:56:1b:d6:8b:a2:9c:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:1E:88:77:E0:2B:D1:85:8F:FF:2C:BD:C9:65:B1:DE:58:16:BB
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b6:26:27:36:87:65:4f:c4:64:85:2c:b5:a4:c9:97:dd:ad:
f6:3b:97:ed:90:5b:f2:34:2a:9c:fc:d9:f0:4e:af:fb:dc:17:
04:ba:1f:88:30:8d:9f:53:08:75:0a:a1:58:82:f6:ef:bb:66:
6b:1e:50:ea:33:bd:ae:71:58:fd:d3:01:af:3d:8e:ea:be:4d:
91:6c:36:7f:a3:24:e2:5c:84:d6:de:fa:c2:88:1a:9b:b0:91:
b6:13:73:e4:eb:77:df:4d:d7:2b:f2:09:c6:c8:d0:8e:7d:bc:
46:8c:1c:50:3e:0e:f8:1b:4a:43:87:bc:78:42:b0:98:4a:46:
b9:bf:8c:d0:a7:41:23:63:51:ac:41:ab:d4:7e:14:f8:36:8a:
10:49:a2:1e:69:2d:f1:33:7d:40:46:c4:d8:40:5d:7b:cd:38:
7d:ea:04:af:e6:46:3a:4a:16:a1:22:b9:b1:b3:3b:b6:81:8b:
f2:b1:d9:fc:69:ab:81:95:10:e4:5a:44:a8:3b:c5:da:8f:b5:
c0:90:9e:75:7e:00:2f:c8:18:0f:54:79:34:7e:5d:5e:e2:bb:
9e:9d:36:8d:00:ee:1e:b5:cd:7c:ab:2e:3d:d3:37:c8:13:33:
c3:f5:81:1f:6a:f0:18:41:a7:f3:04:aa:f5:20:fe:38:5a:d2:
4a:e4:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:50:52 2025 by rpki-client