Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 3eyvm3v0OFLHLijt4XLMG/q2RgmC2Ivx6N0kcdI3U3s=
Subject key identifier: DB:64:5F:3C:50:9F:08:AD:48:AC:69:A4:6E:1A:BF:0E:31:94:FC:48
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 0194BC3C7053CD7BDBB816EB5D42E4EC8828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: TOzNLtk2EcFN8tWWUcBYc6SMW8E.roa (hash: q/YjRgOTnjUrtQ6qzvmbEUmVOXxgxmvQW4n5HH9vrjQ=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: YTbOp+hZ/ufPbWilNfmj9nZKt54Z2m7Bh8gODXglQko=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:53:cd:7b:db:b8:16:eb:5d:42:e4:ec:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=db645f3c509f08ad48ac69a46e1abf0e3194fc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:75:d2:c0:50:05:f9:9e:87:4d:67:7c:b0:
74:c1:45:c3:5c:30:5b:d5:7e:92:d0:23:1c:5c:bc:
2e:46:af:35:5a:61:9a:53:be:9b:89:c0:c6:37:56:
49:31:f1:0b:84:08:84:15:3f:d6:b6:8a:55:32:99:
6d:85:af:3a:a6:1e:2a:e2:80:a7:f5:e4:72:a0:3a:
73:1d:b9:2e:49:ca:bd:a4:5c:5c:46:89:14:88:5f:
7a:24:5e:7a:2d:f8:5a:4e:85:6f:a1:84:fd:a0:9b:
a8:f7:7c:26:be:fa:85:ad:d9:3a:8e:fb:bf:67:53:
37:12:20:b8:89:3a:5d:b1:ff:d3:87:29:ed:79:cd:
16:37:f4:e1:44:05:27:14:72:13:be:92:45:06:d1:
7a:2e:60:5e:ff:b4:80:af:8a:ad:dc:31:58:ca:cc:
ac:cf:ff:b7:c3:1a:73:db:4d:1b:3d:bc:60:a0:24:
f2:4e:e9:5e:fa:fa:91:98:12:c7:c6:70:f8:66:88:
41:aa:b7:e8:23:26:9a:eb:ce:1b:34:93:dd:d2:b4:
a9:51:aa:d3:15:46:91:70:e7:49:c8:6d:30:d2:22:
16:bb:d2:d3:8c:6b:b8:af:86:40:97:93:55:8d:5c:
57:d9:ac:62:c4:30:0a:58:14:5f:37:1d:6c:bc:00:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:5F:3C:50:9F:08:AD:48:AC:69:A4:6E:1A:BF:0E:31:94:FC:48
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:68:f5:36:f4:de:2c:b8:dd:58:d9:d1:cf:d3:fa:b8:30:
6a:88:f9:cf:03:14:bc:92:f5:ca:89:04:1b:35:e2:d7:8b:04:
9e:a2:e7:8a:1c:34:e0:21:b2:a3:83:07:b9:3d:2c:e0:6d:35:
6b:c7:a6:f9:e3:8f:42:7c:d8:16:c3:99:ca:5e:3a:d9:46:95:
d1:36:94:b7:6e:26:d4:80:38:d2:44:23:86:23:13:22:6c:0e:
0a:1e:33:72:b9:a0:e9:6b:95:73:1d:60:e4:e1:19:4d:a5:e3:
9d:cd:a2:ed:65:3e:8d:3b:f9:be:5f:eb:f2:c9:43:51:26:81:
67:14:45:4d:ff:b5:74:c5:13:dc:0b:ee:bd:20:bb:11:e7:9e:
47:bd:22:be:be:4c:5b:38:ba:4f:ef:a9:bd:e7:e4:6e:3e:40:
4e:84:c6:8d:f0:1f:f1:5e:93:8c:f5:8f:ec:2a:bc:ef:74:15:
83:7a:b8:7a:80:a3:c8:7f:e4:a6:33:ea:80:b0:ba:86:8d:d8:
ba:15:3c:d4:ab:03:7d:08:8e:a1:96:11:bc:d5:7d:61:c1:fd:
1e:b1:54:19:04:65:fd:59:b9:eb:17:18:3b:83:c0:b3:04:f8:
1f:0f:12:a4:6e:fd:4d:d6:c8:53:fc:db:3d:19:af:6b:65:f7:
aa:d8:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:14 2025 by rpki-client