Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: IphlGRRVATYWnocGIRp6I6j1/rUunVm+Tp8i3ZKWbL0=
Subject key identifier: 70:9B:CF:B6:7B:62:93:5F:83:28:E3:F5:AF:01:0A:22:CC:8B:A0:D2
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 01962ECFCA9431E9AEDA9163C5CA8DEFC7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 11D3
Signing time: Sun 13 Apr 2025 11:01:31 +0000
Manifest this update: Sun 13 Apr 2025 11:01:31 +0000
Manifest next update: Mon 14 Apr 2025 11:01:31 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: t3obw5IHRskonDf5n14eS1LtRgGiqFNFN/t1jexBY9M=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:ca:94:31:e9:ae:da:91:63:c5:ca:8d:ef:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Apr 13 11:01:31 2025 GMT
Not After : Apr 14 11:01:31 2025 GMT
Subject: CN=709bcfb67b62935f8328e3f5af010a22cc8ba0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:db:b3:8c:0e:f8:41:27:a2:79:e8:8f:ff:
c3:94:4a:ae:d1:c1:92:23:57:95:12:dc:ff:c0:e6:
55:9c:dc:ca:ce:b4:80:96:e3:3c:d3:35:35:99:70:
1c:4f:aa:ac:ee:04:82:0e:45:60:f2:6f:11:b1:13:
55:c9:f8:b6:da:70:c6:1f:e9:7c:6b:bb:6c:18:79:
b1:75:5f:c8:75:dd:47:e6:75:9e:43:dd:34:a3:62:
e0:04:c0:88:4e:42:9c:40:7c:8f:33:32:52:6a:23:
a7:13:be:25:cd:51:b9:68:0a:37:f2:52:ed:d2:cf:
d8:80:6c:0d:ed:2c:89:ff:a9:bc:7a:ab:fc:8f:af:
60:ef:0d:f5:51:c9:79:68:fb:d4:8b:de:76:0a:68:
c4:66:90:74:7d:5b:e1:cf:5d:ca:a6:7a:4c:e3:8e:
64:7f:00:3c:1f:d2:77:08:6c:bc:7f:52:2c:f2:13:
1c:d7:22:42:3c:2f:e0:f2:1d:27:95:13:2c:21:1b:
e6:92:2b:f6:fa:60:a4:c1:48:6e:8b:75:ab:b9:30:
b6:26:65:aa:21:fc:fb:d0:a4:51:11:9f:36:15:2f:
c0:ba:77:9d:40:71:bd:1d:0a:c2:ff:b2:b6:57:20:
30:c3:5a:d1:fe:dd:da:e8:ad:79:b8:9b:60:10:4b:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:CF:B6:7B:62:93:5F:83:28:E3:F5:AF:01:0A:22:CC:8B:A0:D2
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:c2:83:37:7a:37:b3:5c:60:8e:8a:3f:3a:d2:3f:cb:0c:
94:23:21:42:75:0c:6a:00:4e:d0:95:16:99:fb:cd:19:f0:64:
0f:82:7a:d0:ad:7b:20:de:dc:d0:fa:8b:60:ec:24:33:5a:7e:
1e:f0:61:e1:32:c2:ca:62:da:cb:f4:49:b4:03:14:4a:e8:e8:
d8:5f:62:67:a2:36:48:b9:0b:29:cb:0f:17:ba:42:19:c0:6d:
8a:51:59:32:42:bd:56:b2:d6:eb:b5:28:a6:30:cf:a2:f2:f8:
f7:d7:55:88:ea:f7:99:01:56:43:c1:4a:7c:b8:5f:7f:1c:94:
ce:0c:ea:0a:14:de:02:5f:41:49:ae:16:8d:93:60:b3:90:10:
da:e3:42:c2:73:6a:ee:12:f8:88:18:03:6d:ea:30:cd:78:17:
31:0c:5f:e8:99:f7:78:59:03:e4:f7:0d:a9:6c:9e:fb:d2:c1:
0e:0d:2f:80:17:b6:96:b3:4a:71:8a:aa:21:ed:f3:56:c7:bf:
1c:13:97:3e:46:d6:2c:f3:21:f0:02:10:69:46:ab:d5:8f:54:
18:ba:66:86:4d:f1:95:97:fe:40:4b:10:5f:80:31:b6:2f:7f:
38:f7:ec:27:15:4a:3e:e2:2d:f6:eb:ef:fa:77:a4:f4:39:33:
6b:49:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net