Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
File: lQ8oTPXDnybd0jUufyrfeo3GD44.mft (raw, json)
Hash identifier: zgCtCqx15QvtXfA2Um8ZSa/oENuyFSqGsqyJBMynEp0=
Subject key identifier: 5E:2F:6F:15:BA:0A:00:2B:22:6A:7E:BD:77:A3:AD:33:6A:08:1C:84
Authority key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
Certificate issuer: /CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Certificate serial: 0194BD179CB92E680945BD58DC5E592F47A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
Manifest number: 0A26
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: CIXcSM8wlZUJc9_olM2z-Sxe_fI.roa (hash: mDiY7MPNQSCh1DaHA5s1SG/E+/9GUkWw11IjIEdP7WU=)
2: lQ8oTPXDnybd0jUufyrfeo3GD44.crl (hash: uQuegddW+Yv/Tq+6swwp29fymPmV7Xl6/iUYBBCXOpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:b9:2e:68:09:45:bd:58:dc:5e:59:2f:47:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=5e2f6f15ba0a002b226a7ebd77a3ad336a081c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7b:66:35:e8:6c:03:3f:ff:5f:e7:dd:eb:02:
51:d9:9f:85:54:ba:73:83:04:b1:5c:5e:05:00:6d:
de:da:7e:18:e2:b1:f4:18:72:8e:0c:ed:76:7d:6e:
ed:20:26:e9:d2:b4:5c:e6:9f:27:91:2e:b7:43:22:
3b:cc:e9:5a:2c:f2:e5:f2:6f:08:83:2b:ab:e8:11:
88:1b:2d:b7:d9:c4:d6:cf:8c:0b:db:51:93:9c:39:
70:e1:cb:0d:b1:52:7b:35:2b:7a:3f:20:7c:9a:d7:
92:c5:9d:ff:fe:8b:a0:74:2d:27:ee:99:da:2a:ce:
d0:d9:00:41:0d:bb:a4:31:32:a0:20:f0:44:38:c7:
fa:ce:c9:9d:b5:f1:7a:90:d8:eb:7c:22:0b:f4:c7:
9b:93:01:5f:94:43:dd:f2:4e:38:37:bb:41:50:80:
eb:2b:04:85:0e:8c:af:57:43:2c:9d:c8:87:4c:92:
b1:24:8d:98:7d:a2:1c:78:21:3f:58:23:cf:dd:7a:
b5:cc:6a:02:c8:84:c3:e2:d4:ad:91:18:ba:ea:ca:
f1:5b:27:f3:25:7d:4e:01:4b:ef:dc:a1:43:2c:19:
aa:7f:75:c9:1c:ed:8f:01:0f:bc:f4:14:aa:f2:a2:
9d:30:f6:7d:30:57:ca:c2:b3:83:92:dd:fd:b9:d4:
3c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2F:6F:15:BA:0A:00:2B:22:6A:7E:BD:77:A3:AD:33:6A:08:1C:84
X509v3 Authority Key Identifier:
keyid:95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:00:55:ab:b9:7f:73:7a:37:dc:1e:6c:6d:dd:1c:1a:1c:
a6:a4:04:a3:ba:36:37:a2:05:ac:52:61:21:f1:ae:c3:ca:55:
dc:bf:51:4a:89:a8:ea:80:72:99:82:7d:95:dd:55:98:24:55:
65:34:4b:6a:62:30:88:e3:d7:df:82:20:56:0e:f3:77:72:4e:
51:17:ee:62:8f:0c:bf:db:8a:96:94:55:84:dc:57:73:0a:28:
b4:5d:db:b3:14:31:5c:9a:d9:58:9f:a4:36:ab:45:66:0e:99:
d9:36:23:01:f1:5e:93:26:9f:3a:c4:5f:ec:46:0f:0d:f5:99:
7f:bf:5a:37:47:9b:fd:f2:24:99:71:06:d7:f1:b4:ec:2c:e6:
d9:3d:c6:bf:67:e6:1a:6d:28:7d:ef:c6:58:7b:36:7f:27:e9:
27:d8:3c:da:df:32:3b:d9:35:be:e5:d4:66:62:97:3b:c2:af:
20:04:ce:bc:45:1a:b3:6d:dc:c1:39:ca:ea:3f:73:e7:8a:d2:
8f:7b:cb:09:96:fa:e3:7a:bb:7b:c8:99:33:f6:ea:14:3a:97:
1a:d0:07:e3:b5:e7:22:b7:f0:df:84:e3:33:94:7d:05:9a:b7:
15:a5:92:32:c5:df:fc:71:ee:d4:da:b4:b3:36:06:5e:bf:0c:
eb:61:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:19 2025 by rpki-client