Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: b0dwkzgswPHDT830/npII8HhFNLlkj9leLmz8yyWrD8=
Subject key identifier: 34:42:37:93:A5:AB:8F:37:69:DD:2D:AE:D3:59:8B:5A:0E:4A:34:89
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 0194BC04D24E172E6AD2CD9056E7363D4243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 0ECC
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: bt6q6PTF8ueRiqJegnWl0jfi6G4.roa (hash: 8TVgggZ1XLtgR7AATYFo0DWz6MeX2DZ1/wik7k03eIU=)
2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: c+FO5jwz/bbNksJXAA9C/CNvygxQpMt8h4roYWy9tts=)
3: dM8kA9UdpYik4eGdd4p2YObVlEA.roa (hash: 09Lj5oy/dbzOsXRPbe2C4Tko7I3Jb+mI9jtmELQT9g8=)
4: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:4e:17:2e:6a:d2:cd:90:56:e7:36:3d:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=34423793a5ab8f3769dd2daed3598b5a0e4a3489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:8c:77:49:62:e6:a5:3b:c8:45:72:be:de:
aa:84:cf:3d:25:50:49:4d:a6:b3:47:2f:d5:c1:e1:
11:03:ab:49:96:f7:25:85:82:07:72:f6:97:ce:98:
7f:ad:a5:44:80:71:83:7d:1d:e3:9c:01:de:dc:ae:
52:b2:9d:9e:63:17:b8:77:b3:b0:5d:63:cc:a4:d6:
82:ee:ce:92:05:ed:ae:1d:1d:ce:55:89:42:47:e5:
02:b5:af:0e:ce:32:08:a9:f7:5d:8f:09:14:54:3e:
61:27:a0:ec:90:31:e4:18:c4:5f:9e:29:8a:1f:33:
82:be:28:e3:fd:aa:57:3a:23:bc:ed:e7:1b:79:f1:
54:bb:41:29:5c:54:ec:8d:d8:b1:3b:a1:a3:f7:5a:
81:2f:f5:e5:87:21:9b:59:cc:c0:42:b3:3e:8d:ab:
f6:39:dd:8b:ed:b3:a7:ea:ce:1c:ba:34:a5:61:e4:
72:20:fa:e0:b1:d9:21:4f:0f:2f:8d:62:78:7b:50:
24:8f:5e:2c:0b:3c:58:3e:2a:a0:23:82:5b:76:a7:
5e:29:42:db:15:fb:a2:8a:35:55:cc:6b:4a:3d:45:
42:d9:ef:84:12:01:f2:24:69:a0:f2:b0:51:b3:5c:
24:7a:b8:95:55:74:70:4e:96:55:e1:12:e5:e8:59:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:37:93:A5:AB:8F:37:69:DD:2D:AE:D3:59:8B:5A:0E:4A:34:89
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:a9:d8:d3:21:b0:e8:cf:00:00:29:db:24:26:b3:bc:19:
08:a4:10:b6:27:45:4c:c8:2f:73:ff:ab:80:70:26:9a:c1:9a:
f0:88:3b:d0:c9:2a:a5:4d:97:55:b4:4d:f2:19:7d:2d:fd:6c:
3f:ee:37:c6:34:9c:52:9b:f8:ac:34:4c:52:7c:e9:e9:dd:74:
b1:cc:b5:f7:f4:17:88:cf:4a:df:30:83:89:c6:86:e0:4a:0c:
39:2e:25:d7:b3:b0:ee:b0:96:64:1f:20:a7:de:b0:a8:07:76:
45:a5:7b:01:c9:6d:8b:5f:c8:f7:a3:0c:89:1d:cb:24:9f:17:
ba:46:aa:f6:6c:55:72:b7:d0:f0:79:32:c1:6d:94:15:68:63:
22:6e:da:de:4a:17:b1:a0:91:2f:77:a8:de:87:d5:ed:00:63:
26:c8:7d:e1:63:b5:ac:bb:70:5d:d7:dc:95:97:9b:f1:96:de:
45:f3:76:12:aa:60:37:c1:e4:11:61:57:ec:e5:0b:2f:33:05:
23:b1:11:14:a0:4c:62:7a:71:7a:c4:2c:15:bf:6e:db:f0:3e:
f2:47:a4:dd:76:db:6a:4a:5c:82:46:b4:4e:9e:ab:52:78:b4:
ab:5d:28:e8:65:54:19:66:aa:75:ad:cf:11:67:d5:ce:58:ec:
19:0b:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:16:37 2025 by rpki-client