Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: 78rQ9UdtCIk51tb5HseUedWVZpP/v9+ggjZVe1Jd5Bc=
Subject key identifier: B7:D2:93:5C:43:4C:60:4E:29:6A:D0:AD:98:DE:E4:21:DE:C4:E4:47
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 0194BD85B3AB1F71452BE31C09224A6AD821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 72XzTn7rpHovI8hKbF-XuNhiqpk.roa (hash: meAQIU9WXZ6ZgwY3KNsha4oJxSUE/USL+RvW40fZUXI=)
2: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
3: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: EIxe0n2J2wWJp/F9G4azGV88TFWNRWT2LZx1noJYbps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:ab:1f:71:45:2b:e3:1c:09:22:4a:6a:d8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=b7d2935c434c604e296ad0ad98dee421dec4e447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:94:e3:6e:de:df:ed:2b:b2:46:8f:f7:20:
d1:52:7e:ad:31:40:9f:5d:8e:9b:cd:0e:c3:80:73:
ec:a5:02:50:d1:06:a7:2d:ee:61:c8:b8:f6:48:b1:
1b:42:38:23:f3:8a:74:6d:2a:15:d7:3a:06:48:38:
1b:7d:04:49:6f:96:22:8b:28:70:d5:78:de:2b:bd:
a3:77:32:2b:03:4e:3d:b1:c8:22:7d:93:9f:b5:6a:
2d:52:f8:2a:cf:ec:5d:35:75:85:6c:05:56:cb:a2:
49:57:4f:71:f4:32:72:55:1e:79:95:18:d0:b6:31:
26:79:3c:00:4a:5a:5f:c5:f0:fd:13:12:59:b3:e6:
02:3a:05:80:0b:b0:7f:6c:c0:ce:00:a0:ab:c0:c7:
02:12:a6:f3:0e:fb:0a:2a:d9:6d:33:8a:63:98:d6:
1b:df:40:3a:ed:1f:d0:06:b1:f5:f5:fb:78:4b:ff:
b3:88:7f:d4:5d:bb:f9:1e:0e:8c:d8:40:03:c4:24:
8d:6c:c7:d7:02:cf:a8:5f:8e:a9:e7:d7:76:ed:d7:
d2:44:d9:01:95:6e:f2:a6:0b:6b:84:1d:50:a4:8c:
21:d9:ff:a5:1a:0b:a6:92:3d:0a:d2:53:6e:47:85:
89:89:33:0d:ec:f2:3b:2a:78:ed:25:98:d3:fa:48:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:93:5C:43:4C:60:4E:29:6A:D0:AD:98:DE:E4:21:DE:C4:E4:47
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:07:d8:98:dc:19:13:ae:90:f6:89:7a:18:33:69:48:1d:
21:a0:10:1d:ce:ea:09:98:06:3f:4d:6d:af:42:ed:71:82:f9:
69:81:1a:f9:59:c0:6d:5e:e3:c5:56:d1:79:5f:1c:73:d9:6a:
7a:02:86:a6:3b:ed:59:d0:b3:dd:64:16:0f:bc:6c:7c:e1:df:
b4:2a:e2:64:75:16:dd:ff:e4:d2:96:83:a3:56:55:d2:51:56:
f4:f0:ff:21:ca:6e:02:26:f9:ac:7a:f5:53:45:84:3d:ad:ab:
05:58:07:e0:a0:e8:e1:4f:27:61:b7:b8:af:23:5d:db:b7:fb:
e3:60:27:11:22:44:13:cc:3c:99:ca:c5:e6:f8:f3:3e:f8:ce:
71:e6:0f:81:b0:46:22:13:4c:6c:d5:fd:c8:45:83:04:fe:b3:
39:b1:14:f8:67:11:d1:bb:89:ae:73:39:91:04:84:31:89:10:
95:58:01:a9:eb:dd:90:7b:18:92:cd:b7:e3:09:59:a6:bc:91:
61:c9:5c:0e:da:5a:b9:b2:37:22:f7:a9:70:64:9a:a6:03:44:
51:a9:f5:20:eb:bc:7a:91:be:55:3f:0d:fa:4e:ff:79:eb:63:
b6:7b:08:c1:6d:52:ab:fd:f5:5f:02:f2:e4:30:0e:7e:ef:da:
b9:e4:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client