Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
File: 2QqBMQKSV7_3YURI5va1A8Ersp0.mft (raw, json)
Hash identifier: PdcbjJamIwNHThNMDRq6gx6vEkw/b2tO15O445HAThA=
Subject key identifier: EE:BA:97:0F:A8:BF:FA:4F:A6:B6:05:F6:D0:66:90:64:95:83:F7:9B
Authority key identifier: D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
Certificate issuer: /CN=d90a8131029257bff7614448e6f6b503c12bb29d
Certificate serial: 0194BCA9DAD98086E0BFF2FFF37BE38F3601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
Manifest number: FB
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 2QqBMQKSV7_3YURI5va1A8Ersp0.crl (hash: 5BwHqPqrhI13dSIvMm4notRsm8mkx8UN3Cqr2RRcCF0=)
2: ktw-FkrMXPNswM8IraWY-5p7J3I.roa (hash: jzXeR9Bv5fkU8m0kPMqZ57dXqdxvNx+7MlrJIZfIQC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:da:d9:80:86:e0:bf:f2:ff:f3:7b:e3:8f:36:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90a8131029257bff7614448e6f6b503c12bb29d
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=eeba970fa8bffa4fa6b605f6d06690649583f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:a7:f9:f0:68:11:c4:40:0b:67:fd:46:51:
03:c7:92:e6:ee:5b:93:a5:d5:09:ed:72:1d:06:62:
96:03:2c:17:1f:57:a0:6d:0b:f4:a9:10:84:71:94:
a1:bf:0d:96:2d:c7:c5:9a:20:c9:d7:8b:37:44:9d:
8c:35:fd:95:60:52:d1:07:52:10:46:ef:1f:da:09:
0a:dd:c4:b3:7d:b7:a7:b7:70:08:9c:9b:97:02:93:
85:11:8e:1f:36:b6:1c:1c:81:73:a2:4a:d7:4f:e2:
07:f4:07:d5:2d:05:f5:b9:35:c3:91:4f:15:c6:bd:
c8:30:15:0a:12:a6:bc:94:6f:ef:d6:67:83:79:1e:
c0:7b:15:00:35:ed:82:b5:6c:db:4f:88:c8:57:e2:
5b:cb:45:f3:f9:96:88:5b:ae:5f:0c:5f:59:9c:f0:
7c:ab:09:ef:f0:98:34:57:ce:a2:ae:9e:fd:bf:41:
29:9c:a6:6d:df:c3:3e:ae:ca:20:7d:43:22:b0:85:
d5:c9:c2:25:fa:2f:72:80:a4:68:b1:b7:0a:f7:37:
cb:ea:8b:09:71:e7:4f:b9:df:06:e8:9a:00:43:f5:
73:e8:fc:77:2c:68:73:6d:88:09:5e:c5:4a:e3:e1:
d0:68:aa:01:12:8d:a8:1d:80:6d:01:61:3a:75:55:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BA:97:0F:A8:BF:FA:4F:A6:B6:05:F6:D0:66:90:64:95:83:F7:9B
X509v3 Authority Key Identifier:
keyid:D9:0A:81:31:02:92:57:BF:F7:61:44:48:E6:F6:B5:03:C1:2B:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QqBMQKSV7_3YURI5va1A8Ersp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8ff2ad-a68f-4465-8d18-96cd86fd0cb7/1/2QqBMQKSV7_3YURI5va1A8Ersp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:bb:44:5f:dc:23:39:7c:9e:a2:44:e1:cf:90:9c:b6:01:
cb:df:18:fc:fa:b9:08:83:be:69:75:90:a1:db:b1:e7:79:03:
9b:df:d2:47:ef:d6:0a:1c:94:7a:17:e7:11:ba:47:e6:4f:b9:
01:24:d2:84:dc:34:09:91:4d:69:81:30:9d:2c:5f:f0:55:c8:
12:82:8f:33:45:13:ba:8b:63:17:62:6d:2d:46:ba:60:8b:d2:
dd:4e:63:1f:c3:48:07:8f:8b:67:0c:98:49:07:0b:61:8a:de:
38:3d:b6:ee:9b:f5:fa:a5:07:08:4f:7b:63:39:64:e0:6c:63:
98:b9:7f:c8:0d:f5:75:22:9b:f7:f1:fc:49:f2:52:f8:9f:7b:
e4:7d:1d:cb:0d:17:00:88:7e:47:70:00:54:17:cf:ec:9d:a7:
94:f5:e5:e9:5e:91:9e:9b:c3:3b:6e:6e:53:52:46:9e:4e:75:
4b:c3:3c:61:cc:5d:e6:7a:8f:24:38:c0:3c:a4:8b:16:47:8b:
15:79:13:90:54:b2:3e:06:af:df:1d:28:3d:8f:81:c5:21:63:
c0:c7:28:b6:32:35:da:27:9a:0d:fd:cb:bc:b6:d4:92:74:74:
b1:6d:4b:6c:bd:60:b4:cc:11:7e:72:88:1f:8a:35:d3:c1:78:
43:e3:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:34 2025 by rpki-client