Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
File: Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft (raw, json)
Hash identifier: H64ORL9Zae5xztK/MKmsdovC7gVhaM053Sgy1fAPiys=
Subject key identifier: 7A:FD:03:09:1B:7F:83:FB:72:F9:37:33:A2:7A:2E:DB:FB:B4:30:95
Authority key identifier: 43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
Certificate issuer: /CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Certificate serial: 0194BBCE2A270668F284771A3AE497A92D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl (hash: Hs6/KVHhX0og5/DrDSBj4f+f5dWSRv+ESDxWxUx8KGA=)
2: fiGpYaULVSGddPa40kO95drtEI4.roa (hash: hSGW2kYFHKKsMMUOHTMd5Mel06lDgF+QorDCIkRAx3Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:27:06:68:f2:84:77:1a:3a:e4:97:a9:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=436c7aa3502825a68b3745bb3d6072731fe5872c
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=7afd03091b7f83fb72f93733a27a2edbfbb43095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:f6:ce:0f:86:3f:a8:fd:f4:5d:da:d5:21:
4a:91:e7:5e:06:ad:dc:8c:11:f8:33:5c:ea:c9:00:
55:df:b2:e6:2d:dd:16:eb:b7:f5:da:b4:5d:db:67:
23:f1:2f:15:c5:12:52:b8:cf:2f:d4:f0:a1:ba:65:
36:f6:3e:c3:06:09:c8:86:11:b6:b9:9b:9b:02:1d:
92:ca:05:c8:0b:ed:8f:c0:ee:aa:ec:27:3e:eb:16:
bd:b9:9b:ca:fa:00:c4:56:93:a9:99:09:83:e9:70:
f9:10:c5:09:20:24:7e:5f:41:3c:7b:f6:73:3a:a6:
c4:25:37:19:e2:56:e6:66:f5:ef:dd:0e:33:1c:e2:
ca:13:19:98:bd:ec:3d:b9:28:dc:36:55:ef:96:77:
1a:6e:57:38:36:7c:9b:60:32:cd:b5:0a:39:23:c1:
47:5b:77:2a:61:db:38:17:48:63:a7:71:fb:e2:d1:
55:ce:39:be:94:2e:1a:a6:10:38:fe:a7:f0:ca:06:
fa:69:9b:90:80:f8:0d:d0:c2:19:e5:59:be:dd:59:
a1:f5:86:e6:57:e4:d6:2f:54:e9:b2:a7:40:d8:09:
6e:ec:9a:05:c9:13:db:7d:17:d9:9c:54:bc:52:30:
15:4f:fe:d8:5f:29:f3:2c:34:fa:85:48:94:0e:3f:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:03:09:1B:7F:83:FB:72:F9:37:33:A2:7A:2E:DB:FB:B4:30:95
X509v3 Authority Key Identifier:
keyid:43:6C:7A:A3:50:28:25:A6:8B:37:45:BB:3D:60:72:73:1F:E5:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2x6o1AoJaaLN0W7PWBycx_lhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/48a620-d0b7-4bb7-848d-d6bfccaa2034/1/Q2x6o1AoJaaLN0W7PWBycx_lhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:73:e0:73:a0:fe:3a:6f:37:c8:72:09:80:bc:05:6f:19:
5f:4a:76:09:af:ee:a1:ff:99:87:07:e5:69:eb:49:69:a1:21:
85:18:5e:f9:64:5e:11:96:ce:36:d2:97:e7:66:b6:c6:0d:5a:
80:73:ef:10:4d:62:ac:ad:8d:39:5e:9b:a3:5b:f1:6e:c3:ba:
7c:b4:83:a4:a1:44:b4:4e:57:87:64:d8:3e:57:04:4a:5b:fb:
74:8c:8d:63:81:67:81:01:69:6a:25:83:a8:b4:dc:d7:0c:ce:
2d:cb:a3:ed:ef:e3:a4:98:42:3c:0b:4a:dd:f0:d8:9d:92:cd:
7e:ef:13:dd:e7:56:ac:20:d8:5b:6a:b9:7b:4b:e3:a0:c7:94:
da:5c:a7:4d:14:75:bd:f3:3d:17:e2:06:33:92:09:36:22:20:
5c:5b:8b:33:f2:87:dd:ea:1c:ee:6d:99:2d:3b:7a:25:73:88:
40:de:91:bb:86:60:6e:bc:ec:f6:b3:38:a1:11:56:65:6a:71:
ef:79:3f:34:08:e8:19:eb:db:1a:0e:e9:12:27:30:27:da:2b:
24:95:a6:e0:02:89:b1:ae:80:3f:cc:02:12:e9:01:5a:ec:77:
08:dd:ed:39:a5:37:73:84:b6:fd:f4:5d:e1:0e:83:e2:a7:9a:
c6:9f:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:48 2025 by rpki-client