Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: TpJr7SCcl+Crv55Rt4cxWl+eR7X1+VwLB+s50Z3eO+o=
Subject key identifier: 1D:6E:EB:4D:95:C6:3F:03:E7:C5:22:B0:9A:27:8F:CA:1A:DD:B3:52
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0194BC04EDF4A926C698E08A5EAE395CA617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: JBKm1TcJNe17+etJ3JfeiUlUG10o6T+ZrXhuNfsn/e8=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:f4:a9:26:c6:98:e0:8a:5e:ae:39:5c:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=1d6eeb4d95c63f03e7c522b09a278fca1addb352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:0e:14:d1:16:e6:3f:36:b2:63:99:53:e9:
90:0d:06:6f:7c:90:f0:f3:8d:7e:22:b8:46:7e:8b:
dd:39:ec:5b:04:99:2e:50:ad:9f:c1:6a:62:42:bc:
9c:6b:a9:e6:91:ac:4b:10:92:f5:d9:09:76:59:96:
98:0e:28:20:98:1e:ac:1a:8f:3c:52:85:1f:6d:74:
38:ae:07:f9:6b:ac:ee:3c:d1:bb:83:95:b5:29:25:
d0:86:bf:1b:2b:de:72:42:a1:52:4b:a6:79:1a:49:
8d:c3:04:35:c1:67:81:89:41:ef:d0:8c:32:40:a3:
40:d5:ff:c3:31:a7:d2:f8:5c:df:2f:20:9d:a3:4c:
d1:17:dd:d2:8e:1b:e6:0c:38:30:ea:25:b4:77:38:
d7:4a:bf:52:03:76:47:7e:c4:7a:46:1c:52:87:10:
49:db:fe:63:c7:cb:4c:1c:6d:24:1e:d2:c7:7e:b1:
9c:34:c4:84:cc:0f:8c:88:f4:73:31:a5:7c:02:bf:
91:7d:51:c9:c0:70:ed:4c:6e:70:ec:69:2e:0f:30:
a0:8f:d1:a0:6d:7e:15:b6:6b:34:90:87:7c:e3:f2:
cd:9b:37:5a:08:a8:7e:c8:77:98:52:89:30:42:9c:
11:81:33:7e:90:33:41:9e:6b:50:36:f3:03:c3:70:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:EB:4D:95:C6:3F:03:E7:C5:22:B0:9A:27:8F:CA:1A:DD:B3:52
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:13:6e:73:95:04:f6:9c:3a:e7:03:04:f9:69:1f:56:54:
14:af:b0:7f:c7:fa:80:29:6c:0c:cb:06:3a:75:45:c6:ff:db:
b1:f8:fc:ee:67:fb:05:8c:cb:76:5b:a1:4d:3f:e7:89:18:41:
41:c7:37:8e:65:bb:1d:7b:1a:a6:44:52:23:0e:56:6f:04:1f:
80:4c:33:11:1f:74:51:d2:96:03:29:8c:b8:1d:ee:4c:f7:c3:
36:10:f8:d9:ea:61:1e:6b:01:e6:9b:89:c3:2d:42:c3:20:ed:
45:75:89:c4:09:84:4b:6d:26:4f:f3:21:ad:53:ca:8b:ea:7c:
98:48:8c:dd:c4:57:61:56:dd:68:78:a4:cb:4f:47:11:26:bb:
b8:e7:57:29:41:48:e4:e6:08:c5:8f:e9:ac:25:d7:57:e7:50:
2f:f2:3c:d2:b7:45:21:55:bb:6b:83:c0:54:cd:84:ab:5f:5a:
8e:cc:c7:0d:01:78:92:ae:62:b5:57:08:84:1f:c9:51:03:db:
7b:a5:bf:8e:c9:a7:0d:bc:1b:b4:40:f1:27:54:66:46:59:e7:
ea:c8:de:f5:58:f9:25:33:e6:1f:c0:04:4a:df:8a:65:30:eb:
59:f7:d1:d6:a3:45:c1:6f:9a:4e:d1:9f:69:e1:d5:98:57:06:
11:a2:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:14 2025 by rpki-client