Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: 82GXW84Hk/HCS5+902BAqN1ZGA9alYEaARcUgmahy6U=
Subject key identifier: C3:B0:5C:8C:7C:53:93:2D:AE:19:E9:D9:6B:18:59:A9:75:C4:21:EA
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 0194BC72AE2C5C79C57438AF54A0048885F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 04EA
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: Syci8KTKlKSLaQjC4Q8yq4qeu6cN0tNCcc9nyHtf4Co=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ae:2c:5c:79:c5:74:38:af:54:a0:04:88:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=c3b05c8c7c53932dae19e9d96b1859a975c421ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:50:92:a5:86:7f:4f:7b:7a:27:8c:f3:90:
25:cf:e4:72:3a:93:35:41:42:44:ca:1f:60:9e:5a:
c7:d3:57:ca:2a:cc:49:01:10:a1:5a:13:e7:d2:92:
c4:4d:d7:f3:d4:e6:f4:b7:31:a0:9a:c4:71:6d:53:
ff:38:69:87:15:29:b2:e0:fd:13:57:dc:75:b9:f8:
5c:12:b8:fc:3d:2d:7d:34:f4:80:0d:57:b6:4a:d4:
f6:97:d3:8a:36:57:41:05:9e:b5:e4:e9:b0:70:ab:
e8:e1:92:f4:a5:2c:03:57:5a:b0:7c:75:0f:80:36:
b6:0c:e8:bb:fa:e3:3e:dc:fa:06:b5:a1:09:a9:75:
a2:dc:b6:cd:bf:a1:3c:5c:db:4c:52:3b:95:64:bd:
9c:86:3e:4e:1e:f7:00:f7:4e:f1:01:37:aa:64:7f:
3d:8c:d6:0e:b7:5e:5e:6c:0d:ff:ab:ac:11:3a:9f:
e4:5e:b9:2e:fb:1c:19:40:43:1c:3c:4e:9e:1c:71:
6e:7b:ab:f3:9e:81:a7:ed:e1:62:8d:6a:70:d7:e2:
72:ad:e6:8d:9f:22:1e:32:51:32:06:83:6e:80:0c:
f4:66:6e:e3:53:f1:aa:a7:fe:81:15:73:cf:97:91:
fe:cf:1d:33:59:a5:17:be:19:41:16:70:bd:6f:53:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:5C:8C:7C:53:93:2D:AE:19:E9:D9:6B:18:59:A9:75:C4:21:EA
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:f6:23:a8:61:e2:1e:b4:94:07:70:74:40:d3:46:94:5a:
ca:52:49:0b:a2:73:33:8d:4f:27:47:2b:87:d7:b5:bf:cd:68:
ef:ad:ea:8f:3e:5f:7e:68:ff:66:11:88:eb:f4:a1:d0:76:3e:
90:2c:9a:40:a1:9b:32:97:55:79:51:65:a0:2c:0b:63:61:59:
de:f8:eb:44:79:86:5b:12:22:15:2c:89:bb:b9:43:41:60:44:
6c:b3:86:6c:d0:88:26:88:25:b0:28:dd:e5:eb:27:ac:f9:3d:
34:b2:17:aa:de:42:c5:3f:31:da:1c:0a:57:a1:f2:7b:ca:1c:
7a:64:d6:e3:fd:1a:ed:bb:1b:8f:16:73:8d:6e:2e:bf:74:90:
fe:12:27:ab:cf:67:7d:04:ef:c2:4e:54:05:6f:23:c5:8b:9e:
8f:bc:51:92:65:0e:2b:96:1d:95:f2:51:65:57:de:5b:80:b4:
0b:dd:bc:6c:40:e7:e9:b8:9b:36:f6:8f:c5:c2:07:b0:a2:19:
f5:d8:9d:02:c2:64:25:92:69:f3:b6:b9:93:ab:7e:4a:91:95:
ce:57:39:55:8e:c1:7a:36:e9:03:34:f3:da:0d:69:b7:f6:be:
c7:25:67:26:a8:72:99:21:1f:30:f3:2d:56:44:00:16:70:ca:
e9:9d:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:09 2025 by rpki-client