Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: mMKev1bUWSthVmRelJr3kQTRqswqk6lcpSxzMM/ijRc=
Subject key identifier: 51:6C:3B:E7:00:78:F5:D3:74:1D:76:5E:7B:E8:0B:85:3C:E7:B5:69
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 0194BD4E67FC33E5E7E912EC5167FC4875FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: qW9yHCZOQxTGIZigL7aKxF1CuWn/lAvjkyaWFx75Awc=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:fc:33:e5:e7:e9:12:ec:51:67:fc:48:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=516c3be70078f5d3741d765e7be80b853ce7b569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:f3:9a:73:98:61:5f:8d:59:27:ef:a1:9c:
18:e5:df:5c:c5:49:58:1b:1f:29:27:ae:41:b6:2a:
0f:7b:f2:85:f8:fe:36:2a:96:d1:f0:cf:77:64:47:
ce:42:54:f2:51:69:d8:80:70:2a:b3:d8:ee:f9:f3:
26:2b:18:6e:51:fe:3e:dc:95:d0:1c:49:b9:3a:19:
8d:c3:f5:52:18:97:a7:00:47:c3:08:69:bd:a2:00:
11:2c:e2:46:4c:f8:3a:3c:77:6f:59:8f:05:04:72:
6a:2f:70:a1:d8:78:7a:f9:d2:4c:6e:d2:9f:73:8d:
91:7a:0f:d5:cc:7d:74:e4:b3:fe:61:00:85:68:3f:
67:d3:d7:08:5c:21:11:8c:66:b3:fb:71:78:85:62:
0e:ba:d2:70:60:9b:13:36:e2:9b:c3:55:82:38:e2:
bc:e0:7f:67:df:1b:aa:18:ed:f9:cb:4c:af:b5:89:
92:68:9a:fb:1a:61:63:4b:f0:e1:68:85:58:e4:ae:
ec:ba:47:31:88:bb:70:98:d9:2c:56:3e:4a:ba:b8:
57:9d:26:6a:7c:8f:0c:19:e3:df:c2:8d:45:0d:a9:
a8:6d:bd:49:b9:98:ab:bc:8d:a6:5c:de:ee:6c:76:
25:f2:57:36:69:cc:c6:b7:64:14:fd:47:5d:41:8f:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6C:3B:E7:00:78:F5:D3:74:1D:76:5E:7B:E8:0B:85:3C:E7:B5:69
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:4d:1d:f5:5f:08:59:d0:cd:4b:78:d7:fe:58:47:f1:e0:
d5:20:d4:f0:54:8f:36:5f:b7:de:55:fa:62:44:7d:91:ed:5a:
10:89:3e:a2:41:72:eb:40:6d:a4:0d:c1:13:a4:69:b9:71:18:
f2:5d:52:59:bd:92:56:e4:ea:93:74:d5:fd:15:73:9f:f6:67:
4e:dd:4b:a1:09:6c:23:0a:92:30:5d:1f:69:b5:7b:f6:1c:8a:
20:f2:bf:8a:42:a2:ca:28:ed:32:f3:39:99:3c:34:8d:ed:3c:
ad:a7:22:36:ce:d2:6f:3e:af:dd:fc:b3:7a:c3:85:3f:60:f0:
76:90:1b:e8:cc:6e:00:c9:68:15:b3:a8:a1:50:3e:e1:f2:d9:
63:db:0b:54:fe:46:e0:18:a0:eb:dc:64:02:ae:83:86:f7:06:
5f:f6:ce:7d:50:de:e4:79:d3:53:78:08:04:a2:12:59:2c:c2:
a0:24:94:5c:4f:d4:4d:77:8e:28:f9:e5:df:c4:88:ab:85:6e:
df:70:25:fe:34:01:e0:a3:c5:6e:03:0c:61:97:be:98:b5:dc:
c1:34:fe:ed:3a:cc:6a:28:13:69:0e:05:fd:a2:1a:25:42:56:
1e:57:71:c7:a4:81:d7:3c:4e:8b:c5:0f:b6:45:3d:50:aa:9b:
fd:45:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:43 2025 by rpki-client