Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: 2ReXERETpWm1MEkB/+eisfHjiOpR1p3Fdt2I0JXkaWY=
Subject key identifier: 71:D1:2F:58:6A:3A:5D:12:ED:87:6F:7D:53:14:43:D8:7E:EB:EC:77
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0194BD17E9B38A0C1DD7897250310DD2111D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 0F6D
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: xPva4EhP6XojkPZOeMBHtrqKw3RGOMoYY//nlFQAAuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e9:b3:8a:0c:1d:d7:89:72:50:31:0d:d2:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=71d12f586a3a5d12ed876f7d531443d87eebec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:d1:14:a7:c5:9e:d4:26:aa:ab:3e:77:cb:
c5:ef:bd:17:57:a3:a4:57:3b:33:23:44:5e:80:68:
a6:b5:f0:a6:01:ee:f0:52:ea:cf:2a:a4:dc:0f:7c:
e5:ff:0d:71:dd:66:10:64:4b:10:d0:27:db:6a:31:
96:6d:5a:c7:c3:41:1c:ca:4a:31:e6:20:55:87:90:
6f:9f:45:8a:d3:a8:7b:fa:39:84:12:ac:6d:2b:20:
8c:80:bd:9b:a8:07:b0:b7:ce:43:a4:6f:2b:9b:de:
7f:ec:19:07:c7:70:d4:f9:ef:65:52:9c:74:fb:e0:
9e:c7:b9:57:17:e0:ff:25:ab:1f:35:cd:52:47:61:
a7:5d:51:02:a1:08:bb:af:3b:fa:02:e0:31:5b:3b:
cd:7b:48:bc:32:2f:a9:03:1b:c3:65:ee:ca:2e:a9:
48:43:eb:f2:99:5e:4c:3d:68:f7:14:0d:c3:45:a3:
c6:58:9b:98:e4:f3:92:38:ad:0f:26:f7:e1:f2:14:
2a:7a:ae:48:44:96:c6:e4:5b:4e:c0:0f:e4:f6:1a:
e8:88:71:ce:f4:b1:ab:46:6d:92:e5:29:ff:6a:60:
bb:cf:68:c6:2b:df:74:40:2b:ae:11:b3:11:a7:b5:
89:32:6f:e5:24:a6:aa:99:34:0f:a3:f6:ef:8e:66:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:2F:58:6A:3A:5D:12:ED:87:6F:7D:53:14:43:D8:7E:EB:EC:77
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:03:6c:96:ad:1e:81:17:23:58:d8:30:da:55:63:ad:4f:
bb:1e:7d:54:9c:00:fe:90:ed:85:43:74:81:40:e8:bb:fe:4c:
25:b9:62:87:8f:27:39:5e:c9:d2:08:12:00:d4:ca:d9:a9:84:
c2:ea:56:be:af:01:1a:68:b4:25:a5:6c:0a:59:21:03:f9:67:
56:1d:23:72:6c:75:ac:5f:ce:b2:a1:d7:de:3a:e8:19:f0:e4:
80:80:15:62:6f:34:6c:9b:4d:d5:70:25:53:78:dc:61:a7:a8:
28:6b:29:19:91:d0:b2:51:7c:0e:07:fc:77:82:33:b2:78:68:
3a:4d:c8:64:54:03:c4:95:3e:c7:5c:8b:c4:dd:d3:7b:51:81:
9d:8c:5d:80:b6:4b:a4:15:3f:af:bc:d9:00:ad:5b:95:9d:d3:
82:e9:4d:28:e9:d2:e8:ff:d4:b1:4a:27:d3:f6:2e:d4:7e:90:
95:78:1b:79:56:3c:09:16:45:ee:e1:9a:f0:59:f0:ea:99:d2:
6d:49:f1:2e:f1:1a:bd:5f:34:bc:98:02:81:2f:7e:ba:99:d8:
47:72:24:fd:03:93:6e:ae:ea:97:b0:e2:c2:0b:50:bc:dc:3d:
33:f0:c9:cc:b1:30:a6:af:e6:67:88:77:b2:c9:4f:fe:9c:8e:
f9:ae:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:04 2025 by rpki-client