Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: TvsHzgWfTe9GOBXTkMb3lqnqfPk0lqCf6PDy+ivNGo8=
Subject key identifier: 54:EC:5F:96:99:C1:D0:3C:5C:96:D0:91:FD:14:82:9C:32:A7:87:22
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 0194BC72A16FD370E087ABDCA1CE9C838E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: DdbKHClXPaTrPoO4LKrNu8pRmZE.roa (hash: 4tuBD3cJXqHIZUjSdRwBJSi5gLCuD1NraBD3hkjlvR8=)
2: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: o9295u+lJ498/t2lusU2rOIS2t69p84cB9OUOX3nSps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a1:6f:d3:70:e0:87:ab:dc:a1:ce:9c:83:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=54ec5f9699c1d03c5c96d091fd14829c32a78722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:a6:07:25:11:9f:ba:56:77:05:89:72:ba:
34:5b:5f:19:2c:0f:95:26:a6:bb:e2:b9:4d:4f:b7:
3f:ee:84:11:01:6f:a8:6c:94:52:db:1c:60:d0:40:
e3:79:63:9b:89:8d:e6:1f:30:8e:fa:a4:b3:fb:b3:
72:7b:7d:14:e0:44:1b:bc:f8:33:d1:d5:ec:26:42:
3c:9b:11:73:c5:4b:13:79:c6:c8:b1:25:08:68:18:
ae:84:46:72:e8:c3:a5:c1:84:c0:0f:43:73:cb:49:
22:7a:a3:4a:ee:f9:91:bf:6a:80:90:db:bb:d9:4f:
1a:67:64:45:cf:e3:2c:7e:07:9e:f0:77:f0:d1:ce:
fe:db:96:ec:96:24:34:08:c9:82:98:f0:3c:28:ac:
ab:9e:9b:51:4d:02:ab:be:5c:87:f4:3f:0c:b1:67:
28:c0:a5:2e:58:bc:e2:d9:e2:01:c8:a6:48:08:ff:
7d:22:43:14:95:88:bf:3f:6f:ec:72:c3:88:c7:ee:
21:c2:c8:14:ea:bb:86:d0:d1:2d:19:3e:a1:ee:d8:
33:fd:3c:4e:9a:18:e4:86:ad:54:e1:87:cb:b7:69:
39:27:10:56:8a:03:7b:45:3a:fe:32:57:fd:b1:40:
be:cb:2c:68:e3:32:59:ab:1d:6f:86:c8:d5:52:00:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:5F:96:99:C1:D0:3C:5C:96:D0:91:FD:14:82:9C:32:A7:87:22
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:66:38:9d:ec:67:9c:fd:f6:ce:89:bf:66:64:b4:c2:7b:df:
56:d6:a1:80:02:b1:98:60:cc:dd:72:ec:42:91:4e:e0:25:e0:
37:75:07:38:e6:e4:63:1a:d3:2a:a9:f3:d8:df:20:32:9e:eb:
5c:0a:07:e1:1d:7c:7b:36:da:ee:65:51:eb:58:b1:41:75:95:
2b:5b:56:e0:ab:c7:ac:e3:89:9d:39:96:1d:27:f9:ff:73:26:
c0:75:90:fc:e8:48:18:af:70:70:48:93:23:96:21:cd:c1:3f:
f6:b7:45:70:94:35:3c:7f:1a:20:33:d1:63:af:32:99:63:97:
ef:df:5f:1b:dd:49:47:c1:8a:e1:4b:3c:4b:ad:47:58:e5:9a:
d0:10:0f:0d:93:af:87:31:63:83:cd:fc:49:98:36:1a:f2:6c:
f7:31:38:85:59:52:e8:fc:30:2d:1e:38:0c:d5:3e:0c:86:a1:
0c:c8:ad:66:6b:ef:48:93:12:98:cd:89:92:0c:f8:d4:d0:16:
93:f5:60:74:e6:0b:02:42:41:ed:7d:13:b4:2b:6d:11:c3:c7:
af:06:69:80:ae:20:3b:85:63:24:ca:28:ea:fe:d1:2d:59:d0:
84:71:d5:2b:99:11:41:fc:4d:43:d7:e6:90:6e:19:3c:9b:5f:
5a:d4:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:06 2025 by rpki-client