Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
File: R3QefHWNSAQTtfGwBgYRKX5EA28.mft (raw, json)
Hash identifier: +iQ0ApRlW1ZaCrEC4TRiByGk4pVlFepDU8UhQML5DXY=
Subject key identifier: 95:F4:69:79:D5:84:C4:78:F9:85:86:76:56:06:71:7F:37:21:05:C6
Authority key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
Certificate issuer: /CN=47741e7c758d480413b5f1b0060611297e44036f
Certificate serial: 0194BCE08C7D52D5ED8F298D288208BAE86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: K4szTGDgWu8YAkp3B3AunTFhsNY.roa (hash: ZlMWPu4zKIGTz35MfDokFAisIKFFE+qRN3bSmh9wdso=)
2: R3QefHWNSAQTtfGwBgYRKX5EA28.crl (hash: R932+FicjygNniPecAbCTa2sSZ6RL1wmbIoDsearTOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:7d:52:d5:ed:8f:29:8d:28:82:08:ba:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47741e7c758d480413b5f1b0060611297e44036f
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=95f46979d584c478f98586765606717f372105c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:c7:33:83:27:07:1e:ee:cd:51:8a:34:c6:
7e:fb:98:38:64:43:fa:8c:e0:eb:66:cc:2e:d7:1a:
dc:09:44:c0:ef:d2:c0:e5:2c:a1:6a:e5:59:4f:85:
62:7a:77:f6:dd:4d:ba:9f:bc:a3:5a:67:c7:d0:35:
47:73:b9:29:b9:1d:db:43:a9:f2:3e:bb:70:96:52:
3f:9c:b8:c2:ea:ad:97:28:27:57:e6:fa:7a:55:04:
00:d6:44:84:39:34:53:a9:15:56:8e:56:f7:9b:74:
d8:01:b6:44:b9:8e:df:fb:64:b0:20:1c:cb:3a:f0:
cc:32:04:38:1e:79:46:eb:9a:85:81:8c:6c:d5:99:
22:6e:41:75:04:55:1a:dc:5b:d9:df:7f:fe:9c:be:
d2:63:ae:f4:2c:f6:0b:18:b4:45:4b:35:f9:90:32:
cc:3c:d1:0e:47:9b:7f:03:38:ee:aa:44:77:19:27:
bc:18:c3:4c:6b:f5:c6:a6:e5:1a:82:02:12:e0:6a:
c7:05:92:85:c2:18:16:17:81:d9:a5:33:e8:93:75:
c0:cf:37:da:2e:ad:13:b2:68:9d:fc:e4:d8:70:bf:
d0:bc:c8:f0:fd:61:3a:3f:73:05:3a:1b:05:75:bc:
d7:02:6d:3d:83:01:9e:15:57:f3:c5:0f:c1:c5:0c:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:69:79:D5:84:C4:78:F9:85:86:76:56:06:71:7F:37:21:05:C6
X509v3 Authority Key Identifier:
keyid:47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a0:ad:fe:8f:d6:85:d5:e0:69:94:05:ca:cb:39:1c:cc:3e:
fe:51:e7:66:86:c1:2a:f0:5b:b7:dc:89:83:2d:4a:38:8f:7a:
0a:0b:d8:8f:d3:9f:e5:d9:d9:15:73:10:db:34:f8:4c:39:f0:
2b:8a:ed:1c:46:c6:2d:35:c8:0d:9d:04:1c:85:62:d3:5f:7a:
a1:a6:50:a3:f0:bb:0b:fd:7f:72:15:ab:a1:9b:fc:02:46:9a:
be:c9:f7:01:97:eb:e4:a2:07:52:ec:35:1b:82:9c:49:e0:33:
60:fa:ae:be:6a:2c:57:46:8b:a5:d4:44:70:24:10:44:5c:4a:
5e:c4:58:5d:ee:42:9c:f8:a0:f7:9b:1e:31:f9:dc:fa:5d:a7:
2d:29:54:25:89:4c:09:aa:c5:07:d3:77:a2:65:ce:77:28:2a:
22:b9:9e:99:2d:e7:02:ad:be:2c:2f:b7:29:60:b0:e9:52:e2:
7a:3d:f7:13:55:5a:0c:d8:e7:f1:71:f5:00:bb:c6:1a:48:9f:
89:ea:86:9a:22:fd:26:8e:37:3a:49:ed:9d:ca:b0:ec:61:47:
9c:da:87:9c:77:84:d2:5d:11:a4:88:e8:2f:62:98:4a:1d:6b:
65:fa:2b:01:25:44:65:ea:7b:d3:28:0e:03:74:ed:32:db:d9:
d1:2b:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:17 2025 by rpki-client