Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier: +aSZXLV5202/Gq1iu+7b0IlzQYUKd40WPIEu3RT0Bn8=
Subject key identifier: 44:B8:3C:CA:09:ED:FD:63:4A:FA:2C:15:9F:BA:E0:2D:C4:C1:C5:24
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 0194BC3C028164F21B811AD319D44F1E9FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number: 068E
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: OHKo2sh7++S9E5FwzaQduwPva9i2WbLTyRceCviz3hs=)
2: sV9tAEvP7CI_ytsSrwY5KYVQ0uo.roa (hash: z6QhtjWTggxEC3vWBAoujIqlOU7iqRgtEA7A/CNef2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:81:64:f2:1b:81:1a:d3:19:d4:4f:1e:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=44b83cca09edfd634afa2c159fbae02dc4c1c524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:0e:93:0f:88:5f:65:43:4d:f5:46:c2:d1:
dd:d7:60:91:50:c7:60:18:70:7c:ba:75:f0:f3:4a:
46:c0:ce:a3:48:82:ed:76:a2:42:bb:02:f7:6b:e2:
45:2c:75:b7:c0:cf:ed:dd:09:39:fb:af:b7:44:7a:
2b:c2:33:49:4a:52:34:95:4a:74:e2:cf:03:34:c5:
b4:5b:f8:1d:48:d4:f6:67:28:82:81:18:bd:9c:c0:
e2:1e:f4:08:b8:e2:98:03:12:c2:a9:f3:1f:59:82:
97:99:86:71:4b:8a:6f:bb:51:b0:4d:9c:bb:37:65:
69:8a:15:45:95:34:57:fe:72:95:5b:1a:53:c7:d3:
a9:b9:81:92:43:ce:75:bc:70:9e:38:54:b5:28:7b:
43:1e:b0:ed:ea:20:6e:33:0e:c8:09:1f:66:80:ac:
43:2a:0c:f3:80:2e:2c:2d:26:ef:bb:c7:e5:21:d7:
72:5e:4b:6f:99:e2:9b:fb:d0:2b:31:6a:56:8e:e4:
d8:20:70:5b:12:42:e3:01:34:5f:d4:2d:cf:7d:8e:
74:9b:44:8a:08:5b:03:21:b8:05:54:84:28:6d:6f:
77:07:57:a1:40:21:a2:33:60:a3:ea:69:0b:cc:70:
28:54:fa:9a:35:f2:c2:a2:a6:85:da:41:b4:5b:1d:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B8:3C:CA:09:ED:FD:63:4A:FA:2C:15:9F:BA:E0:2D:C4:C1:C5:24
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:82:f0:5d:03:36:cb:d2:f5:18:f6:cc:08:58:65:b8:be:47:
0d:bb:51:87:5f:70:d2:6a:61:d5:bd:4f:3e:bc:05:d0:07:34:
f5:02:29:d7:1d:2c:e2:6c:bf:f1:9f:82:db:cb:18:5d:bc:2f:
5d:6c:b2:0f:b5:1e:be:25:df:36:6c:91:64:ed:4f:bb:94:c5:
00:e6:aa:97:35:67:8f:e4:cf:8e:76:b3:f8:db:0e:32:db:4c:
fe:be:64:eb:9a:46:4f:c9:3e:b5:0b:86:cd:b7:f9:79:a3:1d:
0f:dd:44:35:fa:bf:14:7b:97:ce:c2:e9:b8:66:bd:3a:4d:8e:
4a:f0:d4:5a:2b:d1:ee:f2:4e:0d:c7:e6:b7:d9:3d:42:39:43:
af:0e:3d:e9:9f:34:26:6f:81:a8:10:f7:8f:d9:9c:f6:35:f2:
f3:17:27:4b:55:97:5d:db:35:94:0f:85:de:74:6d:b0:fa:3e:
82:d4:60:e9:8f:b1:96:6f:9a:49:cf:c7:d2:2e:50:80:e9:9e:
11:2e:18:84:ac:de:0a:74:8c:01:98:fc:3b:b6:d8:e2:2b:5e:
b4:5b:4a:07:06:0f:a7:00:2d:27:fe:82:87:af:c2:3b:cd:1a:
b5:e2:47:c9:5c:77:7b:97:31:68:be:9e:dc:dc:c5:09:7e:cb:
63:6b:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:56 2025 by rpki-client