Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: 8i5nVeWXtVUAsMTSjQbJHlwFLrpWv6CxZkV61WiLZBU=
Subject key identifier: E5:CE:61:47:22:32:40:1A:FB:F9:60:2A:1F:FE:6E:69:22:1C:B6:66
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0194BCAA3AD734CA8DCA3EC02614F4173DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0C42
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: jta5tvFe4+sIGPZEuLgHj306MaTuOYX9jXkzcow+X2g=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3a:d7:34:ca:8d:ca:3e:c0:26:14:f4:17:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=e5ce61472232401afbf9602a1ffe6e69221cb666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:13:95:3a:03:f6:a1:a1:c0:fa:c3:be:c3:
a4:6d:ca:cc:54:5d:41:ba:c4:28:32:3b:2a:de:c6:
dd:9c:15:0e:f1:ed:42:4c:e5:27:a2:4a:7b:98:2f:
45:90:f1:26:f9:43:1d:9c:2e:d0:c4:3c:3a:5d:28:
dd:66:c2:c5:93:dd:45:46:a6:30:14:0a:d9:1d:7c:
c6:ea:b9:e2:81:59:59:fb:da:bd:67:6a:b9:a5:68:
dd:ae:8e:ee:49:0e:77:01:6e:81:cc:d7:71:fb:2c:
b4:09:f9:bd:8a:34:45:1b:e1:60:0f:41:24:bd:fe:
e8:c3:74:53:1c:cb:de:04:3b:fe:83:3b:d6:03:dd:
69:4c:e6:ea:16:a8:c0:53:45:bd:e6:2c:72:60:9d:
46:10:a4:b2:aa:64:3a:cb:a1:65:57:8c:1d:d6:b1:
aa:05:d8:8b:25:eb:44:04:e8:46:ab:f7:34:4e:e6:
ae:f4:a9:d0:fa:58:65:d6:70:aa:df:97:30:36:d5:
f7:7a:c5:bc:bb:fb:0d:28:8a:9a:20:96:c2:9e:9e:
63:ec:fd:c1:39:ad:e1:f9:ff:fd:7d:1a:90:5a:49:
1c:c5:2c:c6:9b:76:54:ce:60:93:6b:1f:02:30:f5:
ae:35:60:39:cf:c6:88:40:6b:7a:c5:ad:95:f1:b6:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CE:61:47:22:32:40:1A:FB:F9:60:2A:1F:FE:6E:69:22:1C:B6:66
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:29:b8:92:35:3a:b4:53:27:93:f2:5d:38:08:dd:e3:70:
15:89:47:8a:47:11:73:51:a7:f2:d5:b7:21:c4:33:26:4c:45:
f7:56:14:81:b1:56:1c:33:5c:a4:b5:49:2e:ab:f6:6d:43:62:
68:1d:fd:c7:36:52:94:e3:63:57:b3:f8:18:9f:72:0b:55:57:
1e:c1:32:31:97:bc:55:75:b6:c7:6e:57:25:76:4e:67:dc:eb:
f3:d7:ad:99:d7:7b:d3:2d:bf:61:7d:a8:2c:12:1a:32:9b:d6:
de:f8:74:49:e7:6d:7a:31:c4:95:27:72:2b:70:b3:a0:42:b6:
f8:97:03:f9:5a:fb:fa:8d:ee:eb:95:d6:73:db:55:8f:82:93:
3f:7a:de:24:3f:e8:b1:19:6e:57:45:db:54:7a:66:9e:9c:ba:
f0:30:be:7d:e3:5d:ac:64:c1:3c:ee:63:2d:ce:eb:66:2a:cf:
d7:91:ee:bf:75:c9:99:00:7d:9c:a2:55:e7:cf:41:3b:a1:2c:
ca:21:ef:1f:f2:54:cc:37:61:de:92:bf:2e:c5:f8:59:4b:c0:
c9:9d:4e:9c:bd:e8:aa:2f:8f:6b:10:cc:04:f4:5e:f4:03:e4:
d7:b8:3a:78:14:b4:38:c1:e3:0b:13:40:b5:42:89:b2:d2:1c:
c5:63:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:21 2025 by rpki-client