Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File: qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier: m2nVafMY6IQVvTCFcQR7d1ki7X3EHjKzeYd2gQVAgcc=
Subject key identifier: 36:D0:4A:BF:FB:92:F3:22:42:49:8D:4F:4A:74:92:88:AF:86:A1:D4
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 0194BCE0ADA8E09B0B88A05F6BB7BA14BAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
2: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: f3aTbWN2P842jqDwvCRQaZxUp1mks5PGFcjaUAigqTs=)
3: xR-xyTcgDUSUnYCVabaElezC9I8.roa (hash: uOnGMd/Dnsbr/+oTEAOvNhoWr5AK3fDZRFz3UgcuNvU=)
4: ywU9BD-Ul2Kn1ocV4ZsewnuY0uE.roa (hash: iPRGuDLw1vSp81K2iJmbytmGUYDpbS0FJTnCGny+q4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:a8:e0:9b:0b:88:a0:5f:6b:b7:ba:14:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=36d04abffb92f32242498d4f4a749288af86a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:7c:7c:e8:56:c0:9a:d3:fc:be:64:5c:1d:
36:d9:aa:ec:67:40:2d:5c:cd:8b:40:b0:c1:37:8c:
07:9f:6d:10:66:4d:07:19:c7:38:5f:57:de:9d:f7:
6a:0e:97:e3:46:fe:b0:dd:3b:ff:86:cd:5f:f2:c9:
f6:a1:a1:80:8d:ab:df:da:c3:0c:59:a0:4e:c1:3e:
5d:89:de:21:eb:6a:88:f1:f9:36:21:91:b3:bb:2d:
87:98:fe:43:53:cb:d9:ae:df:65:73:31:d8:b3:79:
99:eb:3c:a6:3d:43:9a:fa:01:07:e6:92:ef:5e:4b:
0a:56:90:53:7c:3e:d4:46:3e:bd:d0:41:6f:0a:6b:
59:22:8d:81:57:aa:b6:ab:55:a8:1f:6e:06:d9:82:
75:3e:67:cf:60:35:00:89:d3:3d:31:2c:af:8f:fa:
6d:c8:6b:04:fe:d9:7b:4a:fd:e0:d7:ed:05:db:60:
1c:e4:93:b7:cb:64:2c:10:ac:4b:5e:03:1f:6b:b5:
db:7e:5b:be:82:15:ff:ee:09:dd:86:16:80:f4:84:
80:4f:cd:b8:80:93:16:37:f9:6a:7f:13:b1:03:88:
02:b9:ce:a7:e5:18:07:e1:3e:06:44:ee:5d:ea:85:
c8:b4:03:38:39:39:60:96:73:ee:8d:24:7b:79:e6:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:4A:BF:FB:92:F3:22:42:49:8D:4F:4A:74:92:88:AF:86:A1:D4
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8d:b3:b0:7d:c7:ca:29:ee:4c:22:17:60:d3:e8:49:dd:47:
34:61:1a:20:f1:06:21:52:61:3c:3d:9d:d2:3a:1e:97:bd:b6:
b9:01:17:b2:cb:bc:6d:06:a1:ef:12:8a:30:90:01:b6:fe:44:
d7:c1:c1:e6:a2:c2:eb:0c:59:4b:56:86:5a:c8:d4:71:eb:9b:
2b:f1:a9:e5:dd:ab:38:82:cd:60:9b:c1:12:35:a2:e7:09:7f:
3e:b1:04:ff:e5:40:ae:5f:8e:0e:ba:e7:ae:cd:64:2e:08:62:
f0:9e:31:77:41:6e:88:f7:55:89:7e:d7:f0:01:1c:13:6a:0b:
04:71:59:d4:1b:91:79:59:20:a0:96:ce:14:e8:99:22:8c:4a:
c1:d1:d4:56:b7:cd:40:5e:b6:c6:74:d4:8a:aa:03:4f:2f:15:
fa:92:f2:b0:82:d9:38:64:17:bb:a2:0e:1f:b9:36:45:8e:3a:
fc:5f:dc:7d:f2:c8:e1:11:88:6e:40:c6:dc:2b:5d:f9:c2:47:
1d:0d:1b:cc:42:ab:99:f4:b4:0e:c5:b8:48:4d:b5:fb:e2:87:
22:22:f9:35:c8:b4:fe:f0:6f:b9:56:f4:15:db:61:22:aa:49:
93:33:e0:02:68:61:6d:90:9f:59:26:c7:b9:16:44:5b:57:5b:
80:c9:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:20 2025 by rpki-client