Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: hkbbJNfwhyPaIgMAFM3q9T5b5AeyBeCYTNSJrg1/S/g=
Subject key identifier: B0:91:FE:E5:93:42:27:15:AC:33:11:F0:AD:4C:63:12:FB:CB:2D:E1
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0194BC3BC460DDC80F7870FB1F99C4FF5062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: 6H4wIfjDUJ6vLXggFBL8iQuVPycZQgI9N3GUNraepMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c4:60:dd:c8:0f:78:70:fb:1f:99:c4:ff:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=b091fee593422715ac3311f0ad4c6312fbcb2de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:2c:47:d8:ac:40:f5:0c:e5:ae:7e:15:80:
94:45:e9:9d:95:57:53:29:bf:fb:e1:46:bd:eb:69:
a6:30:45:09:46:a6:1c:a4:9f:ae:4c:aa:c2:fe:9c:
df:a8:ff:4d:c7:22:f7:c7:36:24:fa:7d:63:05:16:
35:c0:c1:ec:88:2b:f5:85:b5:dc:fd:a3:20:25:3b:
30:c7:b4:d4:22:f5:cf:48:99:89:ce:86:d5:b3:c3:
2c:09:46:48:86:59:71:15:af:4a:e0:df:7f:da:78:
7b:8b:f1:35:f1:10:92:3a:09:94:10:8e:ab:01:6c:
ea:2c:d2:e0:22:c1:14:7f:8b:2f:aa:65:69:6f:d4:
f9:c8:ac:7c:6d:b3:5f:12:d7:05:40:63:b2:54:7a:
55:01:b4:e6:ab:fe:0a:4f:16:70:ce:d7:c0:dc:7d:
4b:ae:cb:33:f0:fa:16:62:94:a5:22:9d:a7:a0:fe:
cb:2a:94:5b:ed:d2:ee:84:12:51:bf:69:f7:c1:f8:
b6:6e:5c:71:67:80:c2:06:65:3a:37:17:45:f4:bb:
b9:34:f0:4a:24:ca:d2:6f:2b:83:64:99:2f:53:49:
f9:5f:b8:b8:b6:dc:84:18:66:15:20:8b:74:ad:a0:
83:66:ae:4d:1a:ce:47:57:d3:36:9c:da:45:e6:b4:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:FE:E5:93:42:27:15:AC:33:11:F0:AD:4C:63:12:FB:CB:2D:E1
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4e:23:0f:97:ae:2d:2f:d6:07:b4:94:af:7f:6e:09:4a:40:
12:5a:10:15:94:a1:37:69:f1:1c:6a:d9:8f:e1:f5:89:ae:da:
70:28:2a:43:3d:83:e6:b5:e4:57:53:ec:36:3d:51:a6:ee:e2:
a9:68:ea:d5:85:1b:76:de:2c:3c:37:32:01:2b:fc:92:df:22:
bc:33:22:12:a3:e8:70:dd:25:14:e8:3f:2d:f6:05:9e:e5:f4:
10:44:7c:dc:05:84:e6:52:f5:63:d6:f3:99:2e:f6:7c:6d:f6:
97:39:bc:79:02:6b:89:0a:87:55:09:b0:79:17:9f:4e:d7:63:
a7:54:ec:f8:c5:9e:62:f3:5f:ca:0a:c7:98:26:1b:f1:bd:e0:
8e:93:88:94:80:5c:2f:1f:3b:7e:a5:10:70:52:46:87:e9:3d:
d5:4b:d2:c6:43:d0:a0:a1:11:fe:06:07:58:7b:02:b5:71:f7:
48:cf:80:d7:61:4c:47:44:60:d7:f6:cd:45:c1:16:f0:67:f3:
2a:53:30:58:b5:00:51:15:44:65:45:5c:4b:a3:29:71:5f:25:
19:f9:28:63:42:1d:3e:9f:6d:3a:85:86:e4:d5:c8:75:ca:82:
59:6a:78:96:20:05:1f:0c:eb:c1:54:46:0e:68:92:8e:29:10:
6a:45:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:14 2025 by rpki-client