Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
File: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft (raw, json)
Hash identifier: 8nnmQi0ZZhoYWNh15st+zH0Cok/sIn7u2Fxonk3Frws=
Subject key identifier: 0B:09:21:2D:F9:58:F5:88:37:1C:5C:BC:98:08:A2:A4:F0:5C:29:BA
Authority key identifier: D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
Certificate issuer: /CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Certificate serial: 0194BD17502A5C6C36E4BB3170B8B6D36D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl (hash: 5uBtVBPw58F2ADTcWnOBa9/cb/cJwFEV/baq6m9D8IY=)
2: Y1iEUL6HkZgDZU0_OFEdoFw8lAQ.roa (hash: CDvGigjNlLt/aSYIESg4jn5aQHhCGPQhN6LUC2qBNmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:50:2a:5c:6c:36:e4:bb:31:70:b8:b6:d3:6d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d2681514aefee9d3c86e1eae35736c84d1c09
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=0b09212df958f588371c5cbc9808a2a4f05c29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:4e:aa:0e:c5:c6:5f:29:33:e3:23:21:80:
f1:0f:a7:13:b6:0c:c1:05:09:c7:bb:2f:fd:96:f8:
7c:fa:e9:33:d6:75:7d:0c:13:e8:9e:51:ef:fd:50:
a7:a2:78:2d:9f:29:e8:1e:71:60:8e:ca:6f:28:5c:
d5:1a:12:4a:0f:96:fc:7b:f8:7f:72:e0:8a:fe:4c:
a7:4a:18:7d:61:65:c5:8d:8a:b9:9c:a7:ff:fb:a9:
72:2a:0d:35:51:26:c6:ce:48:40:65:11:c2:cd:6d:
25:43:90:69:d5:6c:e1:b7:a0:a1:b5:3e:11:f8:4d:
4a:0b:73:84:14:f4:5d:1c:58:eb:a9:fa:ea:c4:74:
d1:f9:4c:54:8f:1f:09:5e:28:ea:cd:34:c5:67:66:
87:5d:ca:3f:93:48:1f:dc:d5:a9:88:0d:8c:dc:84:
7d:81:65:72:c0:56:b7:21:9a:09:00:10:a3:95:c1:
79:ff:f6:0d:51:5e:f1:db:48:2d:c9:12:47:e2:c2:
73:42:93:32:6c:b4:05:79:06:8e:86:70:67:58:fc:
d1:f4:95:d6:de:4a:14:65:7f:55:c2:c0:f5:9d:71:
89:20:31:bb:5c:2a:1c:3d:24:56:ea:8c:11:50:22:
79:59:18:0d:67:78:19:e2:7f:49:93:32:f4:2e:eb:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:09:21:2D:F9:58:F5:88:37:1C:5C:BC:98:08:A2:A4:F0:5C:29:BA
X509v3 Authority Key Identifier:
keyid:D9:0D:26:81:51:4A:EF:EE:9D:3C:86:E1:EA:E3:57:36:C8:4D:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Q0mgVFK7-6dPIbh6uNXNshNHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e0d956-7b87-4edd-b944-1d0f29b4b97f/1/2Q0mgVFK7-6dPIbh6uNXNshNHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e2:87:b3:09:f7:09:be:00:05:87:ad:e9:7f:26:4e:9f:15:
6e:4f:dd:cc:26:01:4f:87:8e:94:67:ac:6f:11:87:83:54:a8:
f9:68:ee:77:b8:3a:9f:a2:83:be:f5:2c:5b:e9:7c:a9:f2:eb:
4f:a3:97:f7:b3:4b:dd:87:54:81:3e:3b:2d:97:e6:72:2e:45:
db:4c:dd:32:ce:f2:01:de:ff:cf:bd:4a:ea:46:d1:1d:3c:cf:
e1:7e:cc:fe:65:f4:5e:ae:c6:34:a6:eb:ff:33:20:cb:02:5f:
0a:c6:b3:4e:67:af:db:50:9b:c4:ec:4e:d7:4c:48:ff:ce:93:
ab:05:56:ce:3e:57:5b:6a:2e:d6:7e:ac:6b:2b:de:36:3f:0b:
17:e7:7e:ac:05:63:5f:6f:e3:9f:29:85:6b:b2:0a:a5:29:24:
f5:5b:c5:ea:3c:57:3a:e6:82:f2:a0:ca:b9:ad:ca:27:d1:21:
e0:b5:44:01:35:f8:45:e7:0b:75:7f:4c:ea:e9:b9:fa:76:1e:
90:cb:77:05:4c:ad:b9:d1:16:df:8c:20:71:52:de:c8:67:37:
bf:bb:57:91:0c:b0:0f:1a:98:c5:d7:3f:ee:22:34:dc:c2:a8:
2c:55:42:c3:c9:41:e0:09:ae:1c:2e:3f:d4:82:96:12:a1:11:
17:54:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:08 2025 by rpki-client