Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: NeUf1RFEAct81ePsZ8Hh8UKw3Tk3R8oFZOvlPwCLS1g=
Subject key identifier: 54:B6:AA:BB:AF:C3:40:C4:BB:C6:5A:65:24:E8:2C:E0:1E:EA:19:F5
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0194BC7301A5D9D9381DA52C64F8E62B7894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: Tb97SpgAn1rnD2n3z+KTweIqi/fSpFLC1ZjT0QyQxy8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:a5:d9:d9:38:1d:a5:2c:64:f8:e6:2b:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=54b6aabbafc340c4bbc65a6524e82ce01eea19f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:46:0d:72:c9:a8:dc:cc:b6:79:ad:c8:8d:
51:51:b5:fa:58:5f:d9:45:f2:fa:48:47:af:2d:b0:
2b:7e:f2:e6:74:ce:3b:5f:30:29:22:0a:01:a6:21:
78:06:19:e4:fa:b3:ce:e0:5f:61:43:99:7a:06:45:
45:3a:3b:47:6a:47:fe:0a:87:7e:65:a8:b9:b2:12:
43:02:6c:5b:b2:2e:81:59:d9:08:f4:a6:3c:1c:46:
cf:ea:9c:27:eb:a3:9a:51:51:59:94:5b:4b:99:74:
a0:fb:e6:57:72:ba:ce:94:0d:e1:23:17:43:44:1d:
9b:58:64:fd:ac:3a:e3:54:64:1f:72:4a:98:2f:f0:
47:d7:aa:6a:d0:e0:be:86:81:58:36:b0:0e:7f:f9:
d7:64:6f:d1:9b:fc:54:2d:c6:86:4a:d2:ad:db:9d:
6d:ea:4c:50:8f:0a:a3:56:04:78:5e:b2:0e:4d:51:
03:18:9e:da:9d:92:ed:b1:71:fb:12:d4:53:9f:a1:
4b:b7:d3:42:f9:8a:9c:4f:fe:06:d7:c7:32:7c:65:
de:ae:03:c3:8b:e3:61:4c:47:f1:4b:64:60:2e:fe:
d1:97:da:27:86:56:af:d5:25:3b:9c:63:b9:4e:11:
a5:e7:b2:61:68:3f:45:e5:5f:b9:af:50:ad:c6:0b:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:AA:BB:AF:C3:40:C4:BB:C6:5A:65:24:E8:2C:E0:1E:EA:19:F5
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b6:b8:37:63:cc:61:75:6c:62:29:aa:a8:62:c7:b0:5c:f0:
b5:03:30:05:bc:fd:5f:8d:9b:8e:39:81:ae:b4:95:dd:e2:a0:
31:2f:1e:ca:d8:c8:52:62:68:cf:e3:37:f0:66:b3:34:23:f0:
b5:0d:a5:31:00:8e:8a:07:7d:5a:cb:c4:1d:81:82:7d:df:70:
21:c4:bb:35:d2:bc:42:97:e9:58:ab:c9:e9:80:be:2f:35:99:
e1:97:2f:ec:6e:05:82:66:f0:8b:bd:32:07:d3:b6:a5:ae:2b:
5a:32:50:0b:5a:c2:58:9a:e8:ba:b6:94:64:2e:7d:e0:f0:a3:
bf:9a:9a:c9:4b:cc:a7:75:7d:93:f8:84:d6:ed:f3:22:89:b7:
2d:5a:12:d2:94:af:ed:5f:75:a1:ec:7d:1b:0a:e7:32:a5:07:
cf:e5:e2:27:80:50:3a:14:8b:ca:b1:b6:df:84:9e:ee:fd:f3:
53:fd:68:c7:b8:9c:ce:19:6b:27:fd:e3:fe:31:5d:23:ee:84:
7c:d6:e5:93:d8:58:d9:22:14:a3:39:77:5c:4a:9b:37:a0:26:
c7:89:64:c0:af:e4:90:59:c2:3b:23:b6:f4:66:dc:e8:0e:80:
b0:2a:70:04:2b:c2:5a:f2:31:5a:a2:9a:c6:15:b6:2e:ce:d2:
05:eb:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:04 2025 by rpki-client