Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: u36iiOcm1Kgxhdb9fXxzlGmUegY0Xnrd+91ny9Xjds0=
Subject key identifier: CC:3B:DE:D8:17:56:7E:FB:6C:5F:96:6C:31:94:DB:11:40:A9:E9:54
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0194BCE0D78ABD2C4F33C6ADDE7CAF3FA32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 0FC2
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: g18JNzeaBDj_rWrQtxiFnJVw5p8.roa (hash: v8/3+xfdKEGc+rWwjKdCG8v4y8xmqF/GI5hHXZ5amFw=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: CDN4akH0EwpbXZYbh+DsSCHUvL7tCo80rWGijixEO5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:8a:bd:2c:4f:33:c6:ad:de:7c:af:3f:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=cc3bded817567efb6c5f966c3194db1140a9e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:ed:d8:17:ba:a2:64:0f:72:6e:23:fe:0d:
75:d8:f2:77:0d:36:bc:13:a4:28:70:5b:d9:43:21:
14:61:b4:c7:9b:78:3d:1e:9e:67:d0:b6:74:47:f4:
9d:23:d9:8b:ff:26:93:c3:db:5e:b6:0b:7b:f2:e2:
7c:2e:77:a5:51:21:8c:6f:b1:20:82:ed:08:1f:fc:
29:21:0a:f7:c8:e8:16:4c:89:f2:ac:49:50:ab:d8:
69:e4:af:8a:aa:1b:ff:b9:0b:2d:17:76:9d:4e:91:
af:f1:ad:15:39:48:eb:9b:79:eb:98:fc:a5:10:52:
17:55:00:cc:ef:cc:e6:9d:28:3f:48:37:21:e9:6c:
37:08:11:5a:f1:c6:20:21:20:0d:97:1f:b4:fe:db:
c2:67:b8:d6:f1:fc:fa:f8:59:d7:dd:02:7a:11:f9:
c5:cf:08:d2:f0:29:93:18:39:25:df:ab:07:5e:1e:
c4:ce:0c:b7:32:da:9d:60:6d:77:4d:a4:07:03:c1:
98:0a:6e:1a:21:af:6d:f0:63:10:7d:cb:15:fc:80:
b1:98:66:61:97:8d:ba:20:c4:49:07:8b:60:32:6f:
c7:d5:83:86:be:17:6e:28:a3:ce:96:52:0c:fe:96:
1c:54:ce:4b:ed:9e:b6:45:5a:d2:45:f0:b9:10:97:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:DE:D8:17:56:7E:FB:6C:5F:96:6C:31:94:DB:11:40:A9:E9:54
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:db:71:66:0b:5d:3f:ef:d4:ab:a6:5b:c8:8c:fc:b0:10:
c7:f7:59:0c:cb:81:ff:2c:31:d2:69:45:fb:47:47:32:33:fc:
15:52:6a:85:f4:db:dc:85:9e:60:8b:7c:dd:90:1c:7d:4f:e6:
a5:7b:cd:05:bd:88:41:ac:5c:7f:85:f9:14:2f:cd:40:d9:ba:
11:85:f0:3c:16:cd:e1:1c:77:ef:9b:24:5e:74:f9:01:b2:f8:
d0:ba:ab:82:eb:61:fa:88:18:b4:5c:54:a1:f1:4f:f6:7e:a6:
5f:a7:e6:c4:10:63:50:ef:13:8a:a8:74:e4:80:a2:e2:d2:fa:
06:b4:f6:82:d3:ac:f7:8e:ff:77:2d:bc:ed:d6:bf:93:77:1c:
ec:9a:4c:1c:f2:72:62:69:53:3a:92:05:e8:56:54:2d:c5:14:
c0:04:2d:4c:2d:66:ea:9b:67:e2:c7:69:f3:de:ef:29:8e:5c:
da:1d:dc:5d:6e:29:8c:5c:4f:c5:d5:4c:05:67:3a:57:d3:41:
d5:16:d4:c0:3d:71:27:df:69:6c:03:8f:9b:f9:02:54:98:e9:
ae:29:51:ba:79:be:bf:42:f5:18:a4:d4:38:0f:56:f3:ff:7a:
ef:83:ba:72:7e:49:21:7d:7d:b9:91:ba:b6:27:d4:7a:02:b7:
66:9c:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:35 2025 by rpki-client