Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: jeDkrgSFv5O2G2imBhclnz4/G+NGwb55oyRBaaMNAvk=
Subject key identifier: 72:8F:F8:A5:F7:FD:6E:D9:D8:A1:B3:38:6F:18:9E:9B:9C:FA:73:35
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 0194BC04B1938559FC92DB5B3009F2A81F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: 3CIpFDjjeK9sVwUPEVl30gWkGzbi7OHBwJnu7khuGVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:93:85:59:fc:92:db:5b:30:09:f2:a8:1f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=728ff8a5f7fd6ed9d8a1b3386f189e9b9cfa7335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:29:7a:9a:09:91:a1:f3:94:0d:61:09:16:
39:67:fe:ad:96:92:f5:8d:13:24:e3:1b:19:40:ea:
eb:9c:c0:59:59:dd:bc:a0:fd:5a:1a:4c:99:75:d8:
44:b7:9a:21:8d:ed:1a:d2:28:4f:cf:c0:1f:ea:cc:
57:1c:d8:b3:b3:90:6d:38:5e:e5:27:29:3c:a0:74:
6e:5b:8e:7b:86:5b:05:7e:88:aa:fe:56:6c:a1:d8:
4c:ea:62:74:a2:aa:f0:79:41:84:91:17:32:bf:49:
54:b7:05:5b:97:f1:ec:c8:02:3a:5d:e4:23:08:b2:
00:17:a2:f4:a4:79:19:34:51:d8:6f:00:51:22:68:
17:cd:4e:fc:52:57:f0:53:e4:05:ca:66:81:03:da:
4e:fc:6d:d9:ef:c5:1b:5b:3d:ce:8c:a9:00:33:e9:
d9:96:bc:04:5e:93:b3:45:4e:52:aa:d1:e2:e9:a8:
ff:93:82:2a:de:2a:d8:f5:d7:b5:50:5e:62:1f:a2:
3d:0f:f2:ea:4e:db:ef:7b:17:ba:61:39:a1:6c:45:
5a:fd:74:d3:f5:76:1d:51:11:f4:8f:46:36:e7:db:
ba:21:2e:2d:9d:61:44:99:3f:93:ee:bd:cf:8b:eb:
c0:09:1b:f6:7c:c8:a2:5c:27:b7:1d:c7:66:38:83:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:F8:A5:F7:FD:6E:D9:D8:A1:B3:38:6F:18:9E:9B:9C:FA:73:35
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:66:2d:3a:73:24:02:2d:98:e3:fc:8f:ac:e9:b8:c8:2a:81:
7a:f8:7a:ae:00:64:3b:91:a5:f6:9a:d6:ba:20:f7:95:2b:97:
53:75:22:9d:cd:00:0e:b5:c0:82:76:84:44:47:2b:21:ed:f9:
ac:2f:81:bf:cb:7b:af:2f:48:95:63:dd:a5:e1:cb:e2:c3:4e:
a5:70:12:80:ee:1f:50:44:34:a6:bf:19:54:e3:c2:9f:46:bc:
67:eb:26:d6:60:dd:78:79:07:e4:72:e9:3f:91:7a:4f:1a:0e:
a0:b5:78:75:2f:9b:71:a1:9a:af:04:ed:c4:79:96:64:4b:1d:
fa:74:e2:be:3d:85:db:80:69:56:99:7b:5c:41:91:9e:96:3f:
49:70:6e:72:85:8a:38:73:f0:a8:c1:f2:9c:fe:69:f3:d2:6b:
c2:fd:ec:16:88:f9:8a:47:f0:25:a3:28:50:ec:7b:0d:93:2b:
45:2f:4b:5e:26:78:e9:57:88:b7:49:6e:6b:6d:90:b1:20:1c:
40:c7:d2:33:bb:25:f5:0e:f7:fe:2d:3e:5f:25:0e:c3:bd:7e:
c6:63:b1:5e:f4:b8:3b:ca:45:cf:d2:7f:26:f0:5a:e5:a0:bd:
cb:1a:7e:2a:94:24:17:54:9f:4f:24:13:f3:5d:f7:88:86:23:
c9:e1:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:02 2025 by rpki-client