Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: HILYOpfO73nqjWWf3CSz77UXFtZtnKBfflpVLHevV6Q=
Subject key identifier: 06:56:2B:F5:B0:9A:0C:13:30:8E:84:D9:62:D3:3F:D4:8D:D1:3F:26
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 0194BBCE72AD286C74435D5EDBC157B1FBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: FQG0ejLSzUt4iA-ikpx0cAR2OKU.roa (hash: kXmpv8tYACCxfjQibnimCHCR1m+/Ufm2bbWZrvhXv8Y=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: p5Bb67irIFiqhGhRkv+TOAHOyyzQ7n6vZ9yXpOsBr6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:72:ad:28:6c:74:43:5d:5e:db:c1:57:b1:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=06562bf5b09a0c13308e84d962d33fd48dd13f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:e5:68:ff:45:82:b4:71:7c:75:4b:85:d1:
89:0d:79:ae:8b:31:c4:20:7c:ab:aa:4e:c2:b0:f7:
07:1c:d4:4f:6a:f9:b4:11:31:5b:33:aa:6e:1c:f3:
07:f0:8a:d0:21:c0:e4:83:78:0c:2d:1b:27:75:04:
b2:71:fc:4c:63:e3:e8:5b:4c:2f:10:4d:4b:77:eb:
3f:a2:c6:b1:0f:a4:b0:74:05:fe:89:b6:e9:f7:fa:
38:53:c9:d6:bf:95:2d:b0:4b:9e:82:75:ca:1c:26:
c0:c7:2f:34:d4:48:77:7a:d3:7e:e6:98:d1:c8:e6:
49:87:ca:f1:3e:b2:b9:ea:d9:e6:34:1e:4f:8e:14:
45:43:58:54:e7:81:35:6d:4f:7b:ed:78:6f:61:e4:
17:31:75:7f:f1:15:57:8c:8c:57:c1:79:9c:97:2f:
88:7d:23:19:82:bf:37:5e:8f:4e:51:03:51:9f:c8:
04:d4:3c:73:54:a9:bd:96:99:64:ae:6f:a6:d2:6d:
3d:56:d8:ca:8c:ba:93:14:9a:f5:c9:54:c1:33:d9:
c6:91:3b:8f:c8:4f:c1:04:ce:85:d6:17:0a:b6:e2:
e8:d3:fe:1a:47:7f:3b:7b:8e:2e:6e:58:4b:24:e4:
8d:a9:53:02:08:79:6d:f0:5e:dc:e0:52:82:bc:eb:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:2B:F5:B0:9A:0C:13:30:8E:84:D9:62:D3:3F:D4:8D:D1:3F:26
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:c9:1a:6c:bf:28:39:f2:1d:b6:e7:f3:4c:a0:53:ae:fd:
fa:a9:3a:75:94:f6:12:2a:63:8e:7c:5e:27:28:6e:74:e1:f3:
94:3b:65:78:b5:09:d8:81:3a:e6:b9:f7:63:da:6b:ad:c4:22:
72:dc:bb:da:fe:9b:b6:63:e4:ae:91:b6:c5:0d:c4:99:95:b0:
7a:c0:a5:a0:cc:35:0a:29:2f:36:c2:ba:ca:95:9f:cf:db:97:
aa:ee:19:6b:d4:db:35:c1:2b:ae:1a:5e:36:9e:d5:fa:90:1f:
9f:31:82:ac:83:4a:82:a6:e0:d3:0f:e5:67:e1:14:7c:e7:a7:
3c:0f:de:e1:28:93:c7:f1:6b:b8:c1:77:af:be:0d:59:09:2a:
b8:c2:49:1b:ff:85:c7:ec:ae:93:60:84:d7:1e:12:86:ea:14:
39:63:3f:f8:f2:fb:ec:12:12:53:ca:f7:d6:79:4d:5d:d0:6c:
b9:fa:f9:76:f5:0d:3d:94:00:96:fe:8f:c4:95:66:44:ac:0f:
1f:23:1e:f6:94:ac:ac:7e:1e:eb:e4:7d:30:79:09:43:10:6a:
82:bf:e7:24:3b:b3:fb:a1:92:a9:1c:12:29:e4:21:68:d0:04:
fb:99:11:b6:cc:5d:24:64:bf:27:c4:ee:b3:49:50:bf:47:4a:
9d:5d:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:05 2025 by rpki-client