Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: EHmq/5Xee1iIp3hWSLJpSuPR4bOXwqjYA6/F1GE7dHg=
Subject key identifier: E6:BF:8E:1B:99:70:C5:52:5E:78:E2:04:75:E3:18:44:F4:BC:AD:DA
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 0194BBCEC5F4DB24262C22068276484B315F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: sZPqZvx1f2t1JNsv+kjgX1gQg4ckyqLMT92Mph0yAa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:f4:db:24:26:2c:22:06:82:76:48:4b:31:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=e6bf8e1b9970c5525e78e20475e31844f4bcadda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:9c:c9:3b:c3:73:ca:45:ca:63:a9:cd:6e:
4e:b5:31:f1:f4:e4:07:35:e4:48:24:ec:c4:0e:24:
62:9c:39:1c:44:2d:29:df:75:f8:f9:2c:48:3e:4e:
04:8b:bc:1f:66:df:0c:67:48:e7:1f:77:29:65:67:
0d:bf:a5:26:bc:1a:51:d6:d5:75:91:94:45:bc:19:
1f:f9:17:d5:56:33:ce:2e:85:d8:bb:8d:b5:db:d8:
59:23:73:af:26:71:a6:f9:70:23:96:c1:0d:f0:f8:
db:ed:ed:d5:49:2b:f0:b0:98:d4:aa:35:00:53:fc:
24:0c:bd:4d:78:f1:fc:aa:ff:fa:f0:76:79:2b:84:
d6:94:2e:a2:f6:75:22:8f:3b:0a:c6:f2:cd:60:4b:
5f:e7:2c:59:16:bb:91:65:35:c5:81:fb:6e:c9:b3:
fe:71:0a:6e:52:8e:bb:b8:2a:94:e3:7c:98:c1:f7:
2f:f1:d7:e1:29:57:e9:67:4d:6a:af:d1:59:f7:7a:
bb:25:e7:f5:5f:6a:6f:79:e7:3c:5d:31:55:b5:04:
86:e1:1a:10:9f:9c:f2:24:02:38:f8:5a:a4:27:ed:
13:07:7a:88:91:a0:47:a9:a1:d0:00:db:70:0d:15:
e8:b7:4b:b9:a5:33:d6:fd:0f:32:d5:a5:e4:46:3d:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BF:8E:1B:99:70:C5:52:5E:78:E2:04:75:E3:18:44:F4:BC:AD:DA
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:7b:0a:93:5c:a7:2a:2d:c6:2e:f5:95:88:64:5f:d7:80:
8a:7b:71:b4:7d:d3:96:18:d4:f7:8b:a3:02:06:11:29:80:b6:
cb:ab:63:29:26:ce:60:8d:a1:af:26:f6:01:03:55:c5:5e:5a:
a6:b8:12:91:84:ef:f9:c1:22:24:59:50:cc:89:35:38:45:f3:
a8:6d:6c:f7:ef:16:95:ce:fa:ae:66:11:a5:31:64:8e:d0:07:
2a:75:ae:59:c1:83:31:30:30:76:b8:87:a4:d8:a0:80:ad:cf:
47:6b:56:3d:cf:94:97:05:a8:85:4f:33:7c:f1:6e:13:e9:0b:
4f:08:f2:1a:ae:e7:19:19:09:4a:11:ff:47:26:a5:8e:7b:98:
63:89:46:75:f8:b4:91:14:1c:32:57:6b:bf:8e:c9:c7:85:8d:
d0:a8:bf:b6:60:45:06:cd:e6:5f:ee:37:94:5a:81:78:c6:65:
58:4a:55:a5:06:6b:65:77:c9:28:a9:c3:48:6a:8e:16:f3:2f:
c5:e2:c9:93:6a:62:e6:49:eb:8d:b2:e1:0e:c6:61:07:ce:42:
4c:bf:a1:ca:8e:5c:9e:31:dd:1b:5f:9d:11:f0:e1:09:68:33:
47:eb:55:da:00:f0:2e:7e:8e:63:e5:0c:0c:43:c0:64:41:6d:
c0:23:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:26 2025 by rpki-client