Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: +5gtVqpDoVWWbnesfxBRcYPd/+EFnpM4EU16UQaW4Ro=
Subject key identifier: 25:29:4C:A6:72:1F:6F:19:D1:CD:8B:63:9C:CF:C9:FC:7E:C1:45:19
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 0194BCE0D3B0B1ED816922F3619721EE6DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 0677
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: N5aFzp1OB9UWKo7oKCLVdoR6rxHUceeHjloDJZksPSI=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
3: xxT8grXnmq40HsKuG1Zwf8qr5yM.roa (hash: Q9jgD1xIS5+5fspqYSArTtS7aFho5oJiLf020/LBelY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d3:b0:b1:ed:81:69:22:f3:61:97:21:ee:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=25294ca6721f6f19d1cd8b639ccfc9fc7ec14519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:cb:6a:d0:b3:47:16:dd:70:23:0b:4f:27:
2d:ea:36:0c:0c:54:a7:ff:75:a5:21:b0:02:51:d5:
32:10:8b:62:02:e7:92:92:f5:bb:b8:ff:e4:3c:48:
c7:03:9a:66:67:a5:d0:46:70:f0:a0:4b:5e:ce:7e:
18:d8:4a:eb:8c:b2:8d:e4:71:d4:a8:70:f5:b2:ea:
75:aa:77:dc:0c:c0:1b:77:70:c7:70:93:dd:52:53:
2b:92:c6:67:9f:a4:a0:24:37:3a:be:61:4d:b5:42:
32:d6:8e:43:ba:1e:19:d3:5b:2a:46:f5:5a:2e:c1:
4a:56:6f:74:38:4f:2d:31:61:bd:d4:d8:c5:0b:f6:
dd:bd:43:43:2d:a9:87:6d:f9:d6:fe:e0:e2:f0:18:
a4:da:23:90:46:4b:2c:77:96:c3:e7:f7:98:d4:65:
19:02:a4:85:e7:79:f8:74:f1:ac:0e:8f:29:ce:6c:
ab:1b:a2:09:3e:de:6e:2b:0a:47:c8:68:19:5e:d2:
18:ac:9b:7b:10:a9:57:45:8e:c3:5f:d5:67:ec:2f:
d0:dd:cf:e0:1c:66:c1:ff:a5:f4:48:cc:c1:57:02:
53:ec:cb:a0:ce:8d:c1:f6:9e:82:7c:ef:f2:46:ee:
d7:e2:64:f5:d4:72:fb:92:e8:61:3c:3e:60:b8:94:
27:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:4C:A6:72:1F:6F:19:D1:CD:8B:63:9C:CF:C9:FC:7E:C1:45:19
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:1d:82:6a:e9:a6:ee:80:fa:5f:b7:bf:9a:d0:ae:78:68:
d4:f9:a5:fc:4e:ae:37:ec:9e:77:0b:a6:13:32:0a:bc:95:8a:
26:5b:b1:46:75:2b:5a:5b:b5:e2:9b:aa:68:d5:8e:42:60:55:
70:7f:f8:04:fa:4e:d8:a5:e0:8b:b0:a8:af:53:e6:91:e5:d9:
46:87:d9:7b:ed:e0:5c:73:a3:da:41:df:05:68:23:1d:55:91:
3d:ae:22:f5:75:62:b5:20:d3:38:6a:3c:58:af:ca:39:8d:4b:
99:de:22:d5:4c:6b:2b:6e:d6:20:d6:0c:3a:28:23:12:76:39:
59:b5:2b:9b:0e:b0:78:1c:36:a0:7f:3b:a6:80:75:09:c4:29:
de:3d:c9:14:c2:38:14:c4:1d:5c:eb:df:d9:42:bd:25:12:57:
dc:58:2f:4d:00:f0:ab:ab:dd:11:ba:26:22:6e:4c:58:05:31:
08:64:f6:d1:38:d8:b7:9d:13:31:63:a9:f6:16:9f:46:16:b8:
8e:0b:bd:cc:fc:26:ae:02:7b:e9:e5:fb:5d:cc:5d:b4:3e:9f:
20:ed:f1:8b:97:c0:d3:dd:53:85:74:7d:68:f5:55:44:80:a2:
2d:d5:16:24:06:61:bf:be:59:97:9a:9d:e5:6a:db:c1:96:27:
bb:8a:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client