Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: UoQktD1n522h9fOYrkD453xmNxaBZxJp4fYYsuzC+yo=
Subject key identifier: 9E:C8:67:21:C1:7E:6A:97:85:2A:5F:DC:90:C2:68:E4:BC:4B:73:29
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0194BD85447B6BE0D70D5F49D052019F1CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0C16
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: WoTEnTk06OxwA2NwZgOqTknyGtn8VERraIPVAK/D1cc=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:7b:6b:e0:d7:0d:5f:49:d0:52:01:9f:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=9ec86721c17e6a97852a5fdc90c268e4bc4b7329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d2:78:91:51:30:a8:58:7e:21:a4:c8:4c:1b:
7e:38:25:39:9e:f9:b9:3a:b9:4a:17:5b:d6:de:91:
8a:e9:93:0e:2d:96:41:5f:7b:4b:c0:f4:65:19:c2:
f1:34:c4:da:98:ea:29:37:8e:6f:97:63:a7:9d:08:
f7:94:c4:30:98:1e:03:02:3b:db:0d:ee:d3:c0:f2:
0e:0f:d5:07:80:ce:b2:93:87:3f:4e:48:6d:5a:0f:
15:d2:fd:c7:30:e0:dc:39:a4:d9:76:3c:1a:7d:65:
24:00:0a:be:36:32:44:ad:03:87:7e:dc:62:e8:47:
6c:31:47:70:10:71:40:19:07:47:93:30:43:17:93:
4b:13:53:71:e0:09:5d:77:bc:be:cc:4c:2a:3a:80:
e7:c0:3c:1c:54:e5:5c:d7:09:8f:64:70:f7:f7:61:
c8:8c:1a:aa:37:a9:fe:85:09:de:ff:85:a8:60:e4:
f3:fb:db:37:a2:03:fb:15:c3:df:6c:d2:d0:a0:4d:
ff:5b:c9:80:ee:35:2c:b7:f7:aa:17:79:54:75:7f:
a7:b3:e9:a9:8b:91:25:34:c9:0a:2e:5a:d5:ce:96:
03:6a:23:0c:f9:69:93:c4:7c:23:51:0a:3d:14:ef:
93:ad:80:47:8a:01:3e:5d:eb:a5:b9:46:b0:34:42:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:67:21:C1:7E:6A:97:85:2A:5F:DC:90:C2:68:E4:BC:4B:73:29
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:be:ad:1d:21:65:cf:b2:79:8d:40:e8:05:88:f4:58:a8:
d0:f4:99:fb:aa:5f:00:41:87:91:36:40:3c:ab:1d:5d:cf:f9:
8e:75:17:42:22:c5:0f:59:55:8e:f6:da:77:9f:e4:2c:0f:27:
2e:05:2c:00:45:da:7b:80:2d:28:46:3e:9f:c6:1b:16:40:5c:
6f:e7:15:2b:9a:d3:02:a0:9a:23:c7:ab:7f:4c:af:39:86:a9:
73:f4:8b:e5:42:4e:04:cf:af:21:d7:a4:76:9c:6f:3d:7b:13:
40:a4:fa:0f:2e:76:ae:cb:3e:28:c2:68:bd:8f:36:5e:f4:86:
6b:6a:42:bb:08:47:d8:00:fd:c4:2f:4b:1d:c5:41:c8:03:e0:
61:5b:33:22:29:d9:14:d0:4a:df:ce:ad:c9:bb:16:81:4f:64:
88:88:2f:5f:ad:82:95:3a:1a:ce:a6:68:a4:ba:61:f2:2b:90:
47:70:9a:6b:e7:e5:e0:3a:2d:ba:4e:df:1e:65:7d:1f:8c:8f:
9c:55:61:3e:69:21:13:3d:d5:b8:65:7c:1a:a3:ed:f1:8d:27:
98:65:e1:21:e0:05:37:62:4c:37:ec:17:f9:ab:66:93:54:a7:
ad:9f:37:36:1c:1d:98:6d:61:3c:bf:fd:7f:0f:46:30:66:63:
51:e8:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client