Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json)
Hash identifier: 7EOMfeEhKGsSk3QUScZtN7bxIHfYvJwyMWWf5gwVOTM=
Subject key identifier: 94:CC:5A:F1:B7:53:DC:24:73:63:FB:B5:57:DE:3B:C7:5F:3A:02:9B
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 01962DF45E0152C45AD8025C87D3324C5AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
Manifest number: 0F1D
Signing time: Sun 13 Apr 2025 07:01:51 +0000
Manifest this update: Sun 13 Apr 2025 07:01:51 +0000
Manifest next update: Mon 14 Apr 2025 07:01:51 +0000
Files and hashes: 1: 0tIESyblj1X2dLuOI_4dwtIbAGk.roa (hash: idjfq2bjhi01HcCWKceI06Z11yPeDXaUk7WJO8YC8DA=)
2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: WvojoCfTk0dYElAKFWgbpwaFUA2DL0IWUFx2zW5LeI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:5e:01:52:c4:5a:d8:02:5c:87:d3:32:4c:5a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Apr 13 07:01:51 2025 GMT
Not After : Apr 14 07:01:51 2025 GMT
Subject: CN=94cc5af1b753dc247363fbb557de3bc75f3a029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:ad:79:08:c5:5c:72:aa:c5:cd:38:1b:f6:
29:29:a3:bd:19:2b:6b:73:12:30:17:ce:09:2b:9c:
32:15:a8:04:79:de:45:06:a2:00:8c:fb:68:c4:8b:
01:45:b8:7d:a0:fb:c5:15:26:7b:a5:5f:e9:cf:c0:
eb:cb:55:c7:7f:8e:f4:f4:b3:fa:89:7e:57:09:56:
d2:05:f1:65:c7:6e:41:d8:24:2e:12:73:40:7e:14:
6d:eb:5d:5a:f0:5c:0e:96:a2:36:40:15:6f:0f:09:
54:ec:74:82:8f:51:d7:a7:32:dd:f0:1c:b1:92:c0:
5d:a0:67:73:e6:a2:15:57:f9:95:2c:f3:80:bb:56:
6d:2d:b2:cd:a7:a7:3d:c2:c9:94:ed:ce:10:58:e1:
ec:70:f8:d9:d3:fa:3f:af:7f:5e:62:2e:5e:e1:d7:
3f:b7:97:d9:25:2d:92:33:da:89:08:86:8a:ca:e2:
39:38:d9:8e:92:b0:bd:64:47:6a:3d:d5:54:04:fc:
7b:26:36:38:27:9a:d4:a0:80:9a:ef:46:52:49:40:
be:cf:90:7e:ae:ca:ea:e6:d7:b5:af:1f:dc:0c:a9:
ed:1e:d8:37:76:af:d7:c5:89:64:8f:fe:01:26:18:
dd:88:e2:1c:26:1f:40:7e:3c:c8:b3:67:ec:80:bc:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:5A:F1:B7:53:DC:24:73:63:FB:B5:57:DE:3B:C7:5F:3A:02:9B
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:ed:3d:27:06:3a:b2:65:df:28:bf:8b:6b:f0:96:de:1e:
c1:82:c5:02:94:cd:62:26:9f:c1:12:6c:af:5c:11:e5:b9:32:
8b:86:82:2d:98:bd:03:f8:89:78:e5:48:8e:56:26:56:fc:68:
f4:f2:1f:62:66:25:d4:10:4c:cc:43:62:37:af:c9:6d:aa:f5:
9f:a3:cb:da:99:ed:9c:66:a4:52:47:aa:da:c1:9e:06:92:42:
b1:25:01:ec:5c:11:fe:21:1a:5e:07:4f:df:d9:98:d1:27:17:
a6:e7:74:02:9e:44:9d:4c:c0:79:a6:1a:0d:4b:29:71:8c:7e:
eb:f5:08:77:66:99:79:78:15:17:9d:13:81:a5:c7:aa:62:3e:
3e:aa:8e:95:68:04:a0:82:71:66:78:6c:21:50:c7:6b:5b:d7:
63:37:26:ff:61:ac:72:59:8d:cb:00:df:61:d8:81:e3:3d:3d:
a0:69:2f:d3:fd:a3:2f:cd:d0:33:17:ba:f8:52:95:42:69:a1:
42:e9:0f:01:47:e9:3d:f1:39:08:bb:cd:74:eb:ff:f2:13:c4:
ab:67:0b:fe:b6:e7:9e:85:03:72:ff:78:d1:e6:33:61:e9:81:
ae:20:d5:d9:16:6b:aa:fb:3f:ca:b8:9d:5b:47:01:4b:98:c6:
31:a6:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net