Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: 1KJXQlSqGSOqt2GBWIpb52Jx0q203YiwViFWF5hAtq8=
Subject key identifier: DE:BC:9E:B9:04:3F:65:BE:AD:8C:6F:17:87:F6:36:4D:B3:02:E0:29
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 0194BCE0A5112880906310A7F28462237C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: DqBzjMPdLyfv4KOeuGd8MQYG7FicyTygc304ckbY9+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:11:28:80:90:63:10:a7:f2:84:62:23:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=debc9eb9043f65bead8c6f1787f6364db302e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:ee:19:a7:40:31:6c:05:4b:6c:66:7d:58:
5d:a0:ca:29:9a:69:f1:e0:ab:36:a4:9e:1c:ec:d5:
dc:0b:2f:a9:05:65:9e:9d:3c:c9:43:66:5d:94:a1:
8a:8b:97:9a:79:e3:13:43:10:01:e7:3d:65:3c:3a:
b9:a9:e2:20:5b:4c:d2:de:dc:a6:5c:4b:6c:d1:f3:
33:68:aa:ff:e5:a6:eb:33:ee:7e:86:1f:23:41:54:
ee:62:ec:53:8e:7f:74:58:95:ad:c4:ef:44:fd:d4:
8c:e4:85:ea:67:ee:39:b1:ee:86:61:da:f8:c5:4c:
00:c3:02:ca:bd:99:2f:03:db:a9:59:c3:76:ef:48:
bd:29:e4:4e:84:bb:ee:ef:23:f8:a1:bc:e6:c2:8e:
9d:7a:44:4b:2f:57:a3:78:c9:7c:e8:dd:62:b6:31:
78:04:9d:e2:0e:f9:40:8e:70:fa:9c:9b:af:f3:ea:
ce:10:bc:bd:6e:ea:c6:d2:fb:95:88:16:3a:1d:d6:
11:c1:f7:ab:ad:b5:a2:04:6b:d4:46:32:ad:dc:78:
80:76:1f:11:c0:ac:b0:91:e4:82:db:15:99:23:51:
08:90:99:21:f3:a8:cc:f8:bd:c2:07:38:af:86:e2:
51:ff:f1:9a:e7:e9:01:c1:75:83:a7:cd:17:3e:03:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:9E:B9:04:3F:65:BE:AD:8C:6F:17:87:F6:36:4D:B3:02:E0:29
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:b8:90:ea:cc:59:40:bd:f8:a9:54:5a:15:f0:08:00:f9:
ee:84:85:d3:6a:34:7b:38:0e:86:44:da:35:20:51:76:9f:4b:
b0:32:58:66:2c:08:34:c9:cf:35:6c:be:bb:34:95:15:ea:62:
d4:03:8e:26:bd:d4:a0:c2:5b:61:45:21:80:1d:3e:07:3a:6c:
ec:09:7d:63:34:d7:27:aa:00:4c:ac:1a:fb:6d:03:90:4d:62:
13:8f:e6:b9:66:3f:fe:63:34:85:d5:89:3b:e5:0d:6d:a0:b2:
68:45:fd:0b:c5:0e:29:26:2e:f4:84:47:4e:2b:5b:b6:43:0e:
ba:8f:2e:77:d9:c5:ab:09:ab:3a:58:ca:09:70:8b:a6:ee:61:
4f:00:51:9f:e7:8f:4d:ed:ec:eb:13:2d:46:cd:f2:ed:29:bc:
d3:da:9a:12:9e:c5:c4:7a:1c:80:08:52:78:81:9e:0c:e5:78:
30:b7:85:9c:03:d6:6b:4e:ba:3e:3c:5f:60:68:62:44:17:22:
95:ff:ea:a9:af:6c:2e:cf:63:84:a9:e7:4a:48:23:aa:67:91:
bd:9c:68:76:e5:3b:51:e3:bc:39:cb:b3:5f:a8:9e:a0:fa:81:
f8:1e:89:4b:a0:99:04:9a:3f:f6:d9:69:42:ee:43:f6:c3:b5:
af:f3:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:49 2025 by rpki-client