Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: vU5wdU1NuCOoAXEy1Zaffc3m96yXnEc9mc85HPzRDAU=
Subject key identifier: 9A:93:D9:1F:79:DC:9D:E5:5D:3C:45:DE:E3:D5:B2:B1:63:94:7C:A5
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 0194BC04DAA0A2766E2EA96C74C853A95F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0441
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: uqHzU8BRZajJkpiN3IfDmqGqImEfPUnrQBzYbcNDQ48=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:da:a0:a2:76:6e:2e:a9:6c:74:c8:53:a9:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=9a93d91f79dc9de55d3c45dee3d5b2b163947ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:71:d7:a4:5a:9e:c3:96:48:ee:78:ae:c4:
b6:04:84:d3:cb:e5:19:00:99:f3:05:0f:3b:d5:05:
8f:5e:ce:51:8f:2b:2f:bb:75:27:6d:e6:2e:80:45:
d9:cc:dc:d1:4e:16:2e:ee:ab:dd:fb:08:07:94:9f:
84:1b:59:af:59:3a:22:65:41:1d:67:5d:ea:54:a7:
0b:b4:4f:0d:62:56:0b:77:19:63:ca:e4:14:71:ab:
ea:e1:e1:00:36:90:fc:cb:8f:c5:b0:45:74:1d:93:
c1:1e:f5:ef:10:69:e4:cf:51:d7:e2:af:e5:81:36:
da:10:e0:92:04:93:bf:0e:00:4f:57:a2:65:bf:2d:
71:39:36:83:39:18:6d:04:66:b7:c4:7b:70:4a:60:
83:d9:e7:59:80:72:e5:2d:88:4f:43:8a:8b:78:9c:
2a:9a:89:9e:d7:b0:0d:84:6e:ca:ab:0a:d9:6a:2a:
cc:ec:62:3b:38:a9:2a:51:b7:4d:5b:55:0d:4a:75:
71:6a:cc:72:6a:da:ad:8e:3d:cd:a9:15:bb:c9:6c:
c4:79:ce:91:6c:f8:2a:9a:94:7f:ca:79:25:31:79:
cc:68:f4:a8:9b:b6:6a:4a:81:db:a2:4d:0a:ff:ca:
1f:a8:20:b1:1a:0a:07:21:7d:8e:b1:87:67:68:09:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:D9:1F:79:DC:9D:E5:5D:3C:45:DE:E3:D5:B2:B1:63:94:7C:A5
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:c3:2e:d6:50:32:01:4d:99:71:5c:46:53:a5:41:6e:62:
95:f7:24:d9:fd:ba:a4:34:03:d6:4b:21:1d:b0:4f:ef:98:d9:
64:7d:c2:ff:d2:08:65:0f:94:ba:33:23:0b:b3:17:a8:e5:47:
b4:81:ec:0b:87:2b:28:de:e8:58:11:3c:ee:90:6d:c4:27:9a:
ec:3f:de:b8:43:35:0d:cb:15:d7:f3:a6:b6:8a:5c:ac:19:a5:
0f:61:22:7a:89:e8:76:41:b9:63:af:6d:7d:ca:48:28:3b:7c:
77:a5:22:f3:cd:6a:d4:a1:dd:83:35:d4:d3:f1:9d:5b:e2:39:
6d:cc:e9:f0:03:6c:3e:6e:b2:2b:4a:68:e5:47:1f:9f:cc:07:
95:6e:7e:dd:67:d6:86:39:cc:a4:1d:61:c1:3d:ab:c4:7b:45:
50:d1:0f:da:73:39:a8:da:a1:02:00:e3:5e:ef:05:5f:4a:b3:
d1:c1:46:99:65:92:a8:0e:43:22:06:55:b3:2b:42:cd:75:a7:
33:aa:58:6c:ff:49:84:ea:d7:a4:88:aa:df:54:29:76:dc:e9:
54:62:e2:e2:64:54:d0:2f:16:98:ec:7a:75:36:56:ef:8c:21:
c4:6d:c8:1f:90:e9:d3:76:81:4d:eb:51:4e:12:25:b5:2f:d3:
65:01:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:30 2025 by rpki-client