Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: iT60CY6q4WCc04/UCeZxzrI5aM3qeCjUKKOwFAB1gA4=
Subject key identifier: 99:35:F9:93:CD:97:2F:AF:23:63:86:CF:10:5B:1D:28:6D:7E:41:4E
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 0194BCE0E93CDE660DCD4FB52FBBC192C5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: W0mA3zE2Rb/mhZcoPnAgQDG2afMq0SLY1O1tilakOdU=)
2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:3c:de:66:0d:cd:4f:b5:2f:bb:c1:92:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=9935f993cd972faf236386cf105b1d286d7e414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:f7:ed:1b:d7:0d:62:72:ed:ac:b7:54:dd:
3c:d9:9d:f0:0f:a2:ba:5a:a8:1a:6f:bb:bd:05:0a:
18:9c:85:86:ae:fd:a1:e6:13:48:76:47:82:71:b7:
84:7c:36:5d:e4:78:2a:e3:d5:ff:3f:0c:81:d2:5b:
69:85:f9:e3:29:03:ff:b0:15:1a:f5:34:e7:8d:aa:
b8:69:82:f4:98:b6:1f:a5:58:44:ff:ae:7e:03:85:
59:7b:19:be:12:af:1a:7e:64:d2:b9:5f:3a:b4:36:
a9:ba:bb:73:4c:ad:73:0f:c9:d1:97:dc:75:0f:c0:
e2:9d:6c:67:97:d6:fa:63:19:1f:62:97:92:bc:b3:
d2:fa:fd:e6:fa:f2:4b:f8:34:1a:ac:27:69:67:29:
7b:fe:33:89:41:6a:bc:4f:6d:44:8f:38:73:dd:65:
38:6c:0a:df:a4:5b:4b:c8:88:36:07:07:20:3c:e1:
8e:98:df:4c:cb:6c:d3:26:a3:bd:7b:de:6e:62:53:
96:da:5f:8e:7b:3c:71:cc:9e:f2:9d:4f:a6:0c:32:
05:fb:76:98:5d:af:36:e5:a8:63:ba:f5:6d:c1:99:
87:1b:aa:0e:a2:f1:78:fd:01:2b:e9:26:ae:8a:67:
50:62:dd:84:a0:38:f8:01:f4:29:ff:9b:c9:74:e9:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:F9:93:CD:97:2F:AF:23:63:86:CF:10:5B:1D:28:6D:7E:41:4E
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b3:5f:4f:eb:0c:86:a3:64:ed:ff:36:57:0d:96:d6:54:23:
c5:4f:79:c6:9a:91:9a:55:43:19:20:ad:c8:3d:82:dc:bb:40:
43:a7:f5:90:1a:2f:bb:95:24:bf:6e:52:b1:4a:43:45:f4:0b:
0b:87:58:07:53:30:a0:87:10:8c:1c:6c:60:2a:7d:1d:14:52:
bc:04:98:bb:3e:2a:e1:98:d7:70:f5:ce:50:ce:22:ad:60:cd:
14:10:f4:f0:ec:a6:23:4a:01:30:30:59:70:42:df:cc:1f:87:
dc:5c:08:02:8d:a3:3e:3a:fd:d3:cb:d5:c7:a7:78:63:09:8b:
f3:93:21:40:be:15:19:3e:70:2e:81:5c:04:6b:be:59:e4:cf:
71:9f:ab:34:50:6d:f4:d5:a8:33:2c:72:88:ac:e8:15:56:2f:
c0:3f:cb:b2:9f:58:9c:5f:af:13:bf:94:e9:72:4c:9c:1f:c7:
98:97:58:e7:3b:94:c3:ae:1c:65:74:8f:ab:fe:31:b1:9c:91:
65:eb:29:d1:09:d8:11:98:9b:d4:17:3e:ce:74:9a:4c:00:8d:
e3:34:c3:5a:04:a5:f0:6f:8e:44:5c:1d:0b:9d:ba:6d:72:2a:
20:16:25:6f:a4:ec:67:2f:2e:4c:45:3c:40:c3:e5:17:e0:7d:
b7:cc:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:55 2025 by rpki-client