Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: 67vqiIXKdk/MEzWrv8o6coVEGTMohn8o7s2ic8RZVxk=
Subject key identifier: C2:EF:1B:8B:FB:75:CB:F5:79:FA:67:2C:2D:57:D5:15:C2:40:2C:90
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 0194BD17E2C847F0F55C9CBC97AE446371A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 11D2
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: 7tMkYcIUlgu9mRHR0oyu1HAp2S0YsGHJagH9+xI/NDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:c8:47:f0:f5:5c:9c:bc:97:ae:44:63:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=c2ef1b8bfb75cbf579fa672c2d57d515c2402c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:7c:e5:81:e5:b6:b1:52:23:3d:91:05:ce:
75:31:b3:a8:f5:3c:cc:35:b8:ec:52:1a:86:b9:20:
0d:82:02:67:95:33:62:9a:3b:40:c2:4b:c1:7d:f2:
df:ce:1f:5e:aa:8e:a4:00:55:50:5b:0c:a8:b8:f9:
88:4a:6b:c6:ba:b4:ea:53:6e:93:43:1d:d5:0c:bc:
fb:68:ce:33:ee:5c:e3:8e:ef:bd:04:00:b9:fd:d1:
95:24:18:6f:17:90:83:fd:3b:8a:99:58:9d:65:5e:
fe:fc:fb:b5:69:37:42:8a:4f:6e:2d:70:ca:fc:05:
88:dd:df:70:b5:0b:ee:fe:25:89:7a:53:5a:64:01:
bc:dd:9c:af:f4:49:a2:93:a5:a7:2c:e6:b1:30:c3:
65:01:60:48:72:42:42:28:0c:c5:49:bd:00:61:fd:
ec:3e:bf:e2:a4:a7:f6:24:e0:b1:d4:01:b8:28:bb:
62:c6:5e:d9:58:f4:32:d7:fa:0f:9d:13:1f:39:aa:
b2:ff:5c:4f:b1:9c:47:0b:d0:7d:64:4d:40:fe:c7:
c2:b1:cc:8d:7c:42:9c:a2:95:25:a4:dc:55:09:3c:
66:55:0d:19:ab:8e:a7:9e:02:8d:fc:2a:de:f1:8b:
fc:6e:ab:25:6b:68:8b:df:f5:02:16:0a:a2:c5:93:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:1B:8B:FB:75:CB:F5:79:FA:67:2C:2D:57:D5:15:C2:40:2C:90
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:34:ff:e0:db:b1:64:fe:fa:72:8b:b3:32:5c:47:75:2c:27:
8d:04:14:e2:1a:50:dd:77:ba:09:28:9b:40:f1:51:24:48:f1:
fd:99:37:ca:5b:8d:fa:d2:b2:2c:3b:c1:17:78:98:03:12:26:
2e:0a:c7:4b:3a:83:b1:a1:07:e1:12:b3:4b:2a:f3:19:3e:3d:
38:af:18:12:93:1b:39:12:c2:75:f0:8a:96:63:48:f2:37:d0:
57:a2:84:2a:e8:93:a1:a6:83:7a:2c:0b:ce:93:34:ac:86:c6:
4a:f1:83:bc:ef:8c:87:63:b5:45:40:20:62:02:0d:2f:00:d7:
eb:eb:1d:f4:d1:02:c9:17:fe:19:c5:69:a5:49:d9:23:9f:c0:
4a:a7:3c:7d:76:f1:e8:0f:3d:e2:9c:1e:b6:c8:c4:00:47:31:
05:48:0b:06:21:51:67:28:5e:59:79:8f:16:77:a3:56:69:e8:
5a:0f:3b:cb:e5:9f:03:8b:7c:c0:3f:48:a5:c3:73:f6:47:72:
ec:88:29:93:18:6b:25:5e:d4:41:74:95:6a:25:24:31:db:db:
c6:1a:98:10:86:53:3b:ae:b5:0d:c3:30:49:23:05:74:7e:4f:
d0:99:88:10:60:0b:39:ef:f7:56:ff:0b:28:bb:76:db:42:4e:
eb:63:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:15 2025 by rpki-client