Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: nYON4OwU8JW0gRbazNORD+D+EhO6W5etDlWDThBxvDs=
Subject key identifier: FD:37:08:D6:A8:79:4F:AC:7A:72:28:84:B5:6A:F2:68:C5:B0:20:58
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 0194BBCE6A75A9B134038CE317D077122878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: zmwBTdpcZFuYik5dfZ9eobE8lIWDTWnL2L2MRClXUJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:75:a9:b1:34:03:8c:e3:17:d0:77:12:28:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=fd3708d6a8794fac7a722884b56af268c5b02058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:2e:cc:5b:b0:7e:12:f5:37:c7:a7:8c:af:
5f:3a:f7:8c:c9:40:81:b1:b7:d9:01:ad:0c:3a:b9:
a3:d5:ae:4b:8f:23:06:a7:43:5c:f2:f0:d0:cc:cc:
ac:fd:1c:41:c9:06:77:90:15:7d:54:7a:6f:d2:62:
b6:e6:e7:0c:47:6a:62:f0:f5:cc:59:42:6c:d7:d3:
8e:6c:62:61:8e:7a:bd:df:a4:d1:ab:f2:f5:82:23:
79:2c:ef:8f:51:ae:0d:e6:72:3f:2e:7d:9f:4b:92:
e5:78:57:2f:74:14:1e:04:43:5c:5c:de:b1:cc:d0:
38:17:7e:c8:5f:90:c0:d7:07:11:f4:39:06:dc:0e:
e1:65:e6:7c:f0:fc:61:4f:fc:af:6b:c1:7b:13:11:
41:a5:89:e6:6d:7a:0f:ec:27:f7:d2:0e:ac:19:68:
ed:8d:6b:9e:3f:1b:80:e0:4f:c8:84:70:32:b3:95:
1c:2c:5f:04:d0:b4:f3:24:91:1b:b1:74:7b:d2:49:
89:92:13:dd:cd:51:bd:85:cb:fa:ae:e2:61:dc:a7:
5e:d6:53:4b:30:bb:48:9d:e5:a1:44:f6:71:2e:73:
ba:08:bb:9b:f1:81:5f:83:c3:b2:9e:96:b5:33:de:
83:d8:49:88:cb:31:11:ec:18:f4:4e:70:b5:1e:27:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:08:D6:A8:79:4F:AC:7A:72:28:84:B5:6A:F2:68:C5:B0:20:58
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:76:0b:bc:52:17:74:65:2e:10:32:c8:b5:4e:56:4b:89:93:
92:78:c8:ae:c8:9b:08:8f:06:99:24:5e:cd:31:20:36:fe:c7:
ed:af:08:48:8f:c8:e2:de:6a:4c:b0:ef:b4:4e:48:f4:67:99:
5c:5f:e5:94:50:c7:d0:34:6a:4a:c3:a5:fe:38:63:e6:7c:0f:
e9:0a:9c:03:d2:92:60:cb:c7:d4:65:a6:15:e6:21:85:03:46:
19:d0:85:99:19:81:d7:dc:ea:d9:ff:ae:c3:a0:02:4d:32:8c:
de:f5:c4:c5:55:59:f1:34:ad:70:20:9b:41:1e:fc:37:c6:4a:
80:06:65:48:ff:f8:b6:b5:25:75:9a:b4:9b:66:46:80:61:8b:
fc:ba:c5:aa:dc:9f:5a:8d:45:f6:1d:21:44:94:53:ed:b6:b1:
ae:db:67:1e:26:c4:75:dd:62:76:34:75:b5:cf:5c:77:b4:73:
6a:18:28:f0:ed:ec:03:6c:9a:da:95:66:e0:29:67:1e:a7:24:
9a:28:19:79:36:df:90:8f:72:42:d7:9b:7c:b7:2e:03:41:e5:
bc:45:d9:14:13:e3:ae:a4:ad:bf:f2:9f:75:2e:b8:bb:e2:bb:
50:c3:5e:a4:97:03:52:1d:ee:58:97:78:0a:41:f7:77:c5:45:
24:53:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:19 2025 by rpki-client