Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: /oWUVnm87jj+tneehJxKx13Bux4/oDgsqZkfmmkHb8o=
Subject key identifier: E6:BB:91:1F:30:F9:F1:43:4E:17:10:ED:F0:5B:02:9D:74:1C:C7:A7
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0194BC04A4FA71E090445AF0E3F511356E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 0E23
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: PMCD2oKVO38SYEYuj0arMV8C3QVOZFOdlfe862pCeho=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a4:fa:71:e0:90:44:5a:f0:e3:f5:11:35:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=e6bb911f30f9f1434e1710edf05b029d741cc7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:98:f5:ae:7e:6d:b7:58:24:4a:13:db:ef:
d6:66:69:dc:ff:72:e1:a3:37:60:57:79:1e:22:cc:
75:13:68:f6:a0:aa:f4:f9:77:6b:a3:cd:75:a8:e3:
0e:73:8e:73:fd:5d:cc:b4:7a:8f:c0:33:9b:21:cc:
ce:ea:0d:33:fc:a4:70:33:e5:62:2d:12:e5:ca:77:
c4:ed:5d:4c:f8:24:c5:e0:2b:df:65:6d:b5:a9:8e:
75:49:fe:49:6c:b0:da:fa:61:3c:fc:ab:42:5a:07:
61:11:24:9c:e9:a3:0c:88:b7:1d:70:96:73:bb:88:
ac:e6:d9:06:7a:43:44:04:67:e2:ff:8c:43:06:e9:
57:b4:ca:15:6d:4c:2c:3b:57:88:f2:9b:e8:5e:22:
cb:94:62:89:3e:28:10:fb:ed:0d:f2:0f:77:50:e7:
a9:1b:f5:b0:a2:1b:31:43:46:81:5b:07:1b:e0:bd:
ad:ad:c0:77:9e:88:05:b1:50:08:44:40:94:36:e6:
35:46:0b:9b:61:6f:88:cf:03:21:84:3a:2b:d5:55:
e4:39:6c:fa:c9:0e:e2:11:97:4b:d2:86:ed:cf:10:
48:c8:24:ba:42:70:c1:ac:ef:76:3b:5e:a6:7f:a4:
18:ca:52:2b:8f:f5:5d:0e:a8:16:5b:ed:3b:43:9f:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:91:1F:30:F9:F1:43:4E:17:10:ED:F0:5B:02:9D:74:1C:C7:A7
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:d2:44:0a:fd:9a:dc:ae:3e:37:02:08:62:e5:8f:18:bd:
6b:42:e9:a0:32:f1:ad:9e:be:51:92:a6:d8:8f:00:73:45:fb:
8d:2b:e7:0e:55:22:ac:7a:62:8c:40:3f:2a:dc:e0:62:66:8c:
b3:ab:db:54:50:37:44:45:05:b8:a1:5b:81:30:f3:f8:99:e9:
d7:57:04:f4:f8:f8:ac:32:f8:1c:43:67:96:86:7c:a8:f3:97:
6d:6d:9d:5f:cc:1d:a6:d4:75:74:1b:02:53:28:c8:c4:bf:20:
ae:5d:5b:b3:47:45:0d:61:45:cd:12:4f:4a:4a:21:d2:cb:bd:
7c:99:9e:24:98:c8:97:51:4e:3e:0d:6d:bc:75:87:7c:f6:7e:
7d:11:6e:8e:66:db:56:29:bb:52:06:81:9d:dc:69:79:f4:6f:
eb:35:36:c1:65:bb:0e:67:7c:3f:88:d3:01:60:a8:22:c7:3b:
b1:0d:dc:d3:fd:37:68:61:b2:ce:11:79:12:97:14:37:18:96:
80:48:cd:d1:65:6a:b5:cb:f5:3c:37:db:86:c2:c9:2b:93:8e:
0b:e6:a2:f0:0e:4e:7c:34:91:0e:c2:cc:0e:e0:70:ba:0f:4c:
80:f7:f8:88:82:e6:f4:08:d4:77:7e:85:5c:99:fe:b9:a1:d2:
53:11:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client