Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: uze+7Xt/6PRGXeHB6GbG4WbdFvjCu/foQvRFlrvN2Yw=
Subject key identifier: CE:78:A7:E5:25:52:AD:FA:03:2D:51:8F:F1:3F:DC:DD:D8:FE:7A:D0
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 0194BD4E79C74935C3E4FE254D792D34C710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: Xqwt4QxzRzAy+u9c+PbQnX5nMtcMbz7yTkhcG+wjVqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:c7:49:35:c3:e4:fe:25:4d:79:2d:34:c7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=ce78a7e52552adfa032d518ff13fdcddd8fe7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:4d:5b:fb:9e:1b:f9:56:45:f2:f1:06:2d:
1b:2c:a7:bd:61:e6:5d:92:03:8e:97:3f:a9:de:d6:
55:5c:1b:b7:9e:dc:7f:81:6e:27:ca:3a:fa:23:f2:
65:ae:89:00:aa:c8:71:5c:60:af:8b:f8:26:84:97:
53:25:93:72:b6:80:1f:f9:38:32:8f:d9:27:77:cb:
53:bd:dc:5b:33:fc:a4:8c:3c:43:13:74:23:d7:40:
34:b7:59:38:df:09:94:82:69:54:d6:dc:31:98:6d:
d0:70:d8:ec:d3:cc:89:c7:5a:e3:94:48:bd:7b:35:
75:c1:9f:c7:15:3b:73:3d:48:88:b2:4d:ed:e0:f2:
8d:60:8e:3e:50:7f:21:4c:3c:46:e7:09:81:15:83:
be:86:dd:04:c9:30:64:c2:5c:0f:c6:2b:89:e1:f7:
8d:0f:55:16:1b:40:8e:44:a5:9e:58:de:8d:f3:e3:
1d:55:a1:8a:8c:9e:88:74:c3:83:af:6c:ca:7e:a9:
5d:d3:12:ae:cc:51:87:aa:a5:4a:08:9b:82:4d:0e:
d7:52:a0:9c:42:c9:52:74:52:a9:24:18:1c:89:a2:
c3:c4:ec:7c:73:7f:2f:6a:30:99:7f:d8:d3:6b:72:
d8:cd:ac:52:0d:b0:0a:81:da:15:60:7c:1e:28:3e:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:A7:E5:25:52:AD:FA:03:2D:51:8F:F1:3F:DC:DD:D8:FE:7A:D0
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:25:db:63:b1:28:8c:bd:10:78:f4:c3:d2:4b:e2:c9:54:be:
f7:b5:c6:2c:dd:ab:38:49:ca:10:9b:76:c9:ad:40:40:bd:7c:
3f:11:99:1f:c2:ff:24:f7:64:07:ec:4c:60:1d:da:16:c3:60:
71:7e:10:fd:bb:d0:b3:55:84:37:6c:d8:02:a5:10:e9:97:96:
bf:c0:34:f0:8e:92:c0:93:27:51:a3:21:fa:ab:ad:72:fb:bf:
49:9c:a9:68:90:d5:a0:16:fc:7e:3b:fe:98:a8:7e:b2:46:6f:
eb:f9:6e:53:b5:37:05:78:77:1d:e5:29:45:8a:55:4f:b5:0f:
a9:1b:52:33:37:08:a5:f0:49:b4:f7:b0:d6:4b:55:df:97:a6:
22:87:6a:70:8c:c7:54:46:dc:24:ff:c3:42:c9:b5:c7:32:1d:
25:7d:0e:2a:7c:91:8e:51:cb:a9:2a:9c:2d:f6:4d:a0:51:b6:
82:2a:86:05:9b:f2:42:9a:df:02:b7:8f:88:08:72:65:5c:c3:
5b:6f:ab:16:60:72:b9:09:8f:14:1b:ce:e8:1a:85:a6:74:c3:
15:5e:fe:78:db:73:bc:4a:c2:2e:f3:51:c3:f7:01:ba:72:e2:
aa:24:85:67:e7:1d:b8:36:cf:eb:a6:db:46:eb:71:de:23:40:
1a:26:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:38 2025 by rpki-client