Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: pMJSD9wL3nJvQ7Pogu/w+6CvmEBkuT9XKXfImr41S9E=
Subject key identifier: 08:45:D8:9C:98:04:17:E6:DD:A0:F6:53:57:5A:02:84:4A:04:44:F2
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0194BC051A061263F1648B5C5D22C7B12835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: Ch8W1l2-KcFkVG7wM4vbKHN4R3Y.roa (hash: V4IlmhJxCV4xeIbfy/3oXd/+/SQnNJ6kXZK4ntfahuM=)
2: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (hash: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: Ni8PpNhbnk8z3VQDsstO6iDQPm0z9frDpcGHL9poBbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:06:12:63:f1:64:8b:5c:5d:22:c7:b1:28:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=0845d89c980417e6dda0f653575a02844a0444f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:2a:9a:bb:85:57:81:e3:5c:d3:c6:f3:3b:
42:4c:57:61:9b:dc:ae:7e:04:72:10:91:21:99:f1:
5a:3e:84:c9:71:26:60:79:4b:00:0d:00:55:6d:e1:
da:a0:b4:67:80:48:b0:62:35:7a:f2:17:ab:98:15:
ff:26:9a:95:a3:56:21:99:b8:3b:46:73:ce:41:3b:
cc:b6:a2:7c:a5:a8:bd:19:4f:37:7a:2c:bd:98:c5:
8b:16:6c:69:ff:63:05:7a:57:a6:5b:e9:fc:ba:5a:
ee:a6:4c:3c:4c:46:3b:b6:03:c0:f3:1e:ff:4f:5c:
a4:0c:27:bf:77:24:6b:50:40:bb:e4:68:42:c3:ff:
23:51:68:32:35:0e:0b:4e:76:2e:21:46:d3:8f:83:
e3:fd:e7:4b:49:29:ed:2a:e7:15:99:1c:08:5d:0f:
9a:b7:85:0c:38:a2:20:2c:5c:7b:e7:10:81:6f:08:
24:65:71:2b:a2:e8:2c:1e:79:c6:a1:64:50:1d:1d:
ea:27:ae:43:d6:2b:c5:91:95:94:5b:8b:0e:85:f3:
84:d4:75:e3:86:58:6b:dd:29:eb:04:af:4c:e1:75:
d8:3e:94:6a:fd:68:fe:2c:ba:8a:17:7a:05:dc:00:
2c:8c:50:3f:f7:bf:7a:6f:a8:4c:51:df:4e:db:73:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:D8:9C:98:04:17:E6:DD:A0:F6:53:57:5A:02:84:4A:04:44:F2
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:2a:95:27:44:11:77:b1:db:2e:27:a8:b0:74:1e:9e:46:
91:7e:fa:1e:84:f4:97:ec:f6:fa:02:29:00:7c:ae:13:99:b2:
a9:0d:88:74:90:68:41:c2:8a:2e:0f:1f:94:6e:14:95:78:ec:
b4:6c:1f:ca:4e:6d:c9:fe:16:3e:bd:f8:42:40:2f:38:2a:c2:
bc:79:df:5c:3b:27:c8:33:94:1c:f6:b6:0f:62:ba:af:eb:f1:
c3:05:74:23:81:ab:9c:a4:59:4e:1b:90:01:a3:16:a6:ff:05:
3d:47:72:66:43:51:a5:83:5c:cf:eb:51:fa:cf:97:0c:5f:9a:
7e:10:e6:d4:58:25:28:73:10:72:b6:9f:7c:b7:46:35:3c:27:
b3:bb:65:bc:c8:43:2c:63:8c:e9:29:ee:dc:c5:d5:f6:af:8b:
0b:8a:b4:e8:25:aa:5c:38:f7:c7:9d:17:56:b5:25:a6:ce:b8:
3e:fc:fa:1b:b9:a7:b7:5a:6e:9f:7d:a4:52:09:3d:ed:3a:f7:
19:e7:f8:9d:86:3d:dd:ed:32:05:1d:aa:f2:41:73:53:74:5b:
ab:dc:17:68:cd:db:c0:e7:46:31:6c:9e:bc:0c:bf:99:c2:8a:
4a:d0:e9:5f:d3:63:f4:95:fa:0f:dc:a2:37:bd:04:01:61:ff:
57:2c:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:47 2025 by rpki-client