Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: qG81T7dvxqGIlmetFDtVj0V5PuSlrVTdJt+5RYwabWQ=
Subject key identifier: 5F:D0:89:D8:EF:2D:29:C0:A7:52:8C:0A:BE:C5:5A:7E:B9:92:7B:DE
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 0194BC3BF9AC163160C4630A0DFEDFDBA2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: keD1UKCCLwjvy2GwagzdMlq9kvPM8dbtmN5issWUL1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:ac:16:31:60:c4:63:0a:0d:fe:df:db:a2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=5fd089d8ef2d29c0a7528c0abec55a7eb9927bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:35:48:79:0e:d7:57:05:49:bd:fb:1b:e9:
8e:29:cf:76:81:ea:81:34:d0:90:a0:b0:bb:90:cb:
b2:c3:4a:a6:28:10:89:17:df:6c:b2:ae:d5:c8:5d:
44:22:86:df:7b:bd:fd:3d:4a:f1:af:ba:c4:d2:ae:
a7:20:74:94:3e:4c:55:99:b7:d0:c7:cf:da:a5:47:
5c:3a:14:e7:e0:15:15:a4:10:53:0a:10:60:a8:20:
03:10:2d:72:c4:35:8f:d7:b3:34:4e:1c:ea:a3:8b:
b0:41:2c:af:93:1b:e7:c3:ef:5a:a4:59:fa:fa:22:
16:1f:b1:13:46:85:48:a3:99:5d:a0:d7:8d:4d:69:
0a:3f:77:62:97:7c:69:b7:16:55:1a:84:a2:10:b3:
19:f2:ef:b0:6e:bd:0b:c8:f8:5c:9b:d6:63:9f:5c:
77:d0:c3:84:36:09:e0:81:56:39:c8:99:34:8b:8c:
5a:f1:81:99:66:d9:30:6c:a6:6f:64:a7:11:85:c3:
3e:dd:ba:21:5f:bf:5f:8e:6c:c1:f4:26:9d:04:51:
b5:f2:97:1b:48:4d:f5:d1:ae:6c:ea:b0:e0:7c:20:
df:21:38:bf:24:c8:8e:97:f0:f4:35:9d:12:29:7f:
f9:af:84:8c:21:b1:bf:07:ba:67:d2:a2:7f:e1:17:
68:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:89:D8:EF:2D:29:C0:A7:52:8C:0A:BE:C5:5A:7E:B9:92:7B:DE
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b0:45:96:25:1e:1b:4c:7c:42:01:79:ad:a8:3a:d9:07:7b:
67:a4:75:4f:57:f0:c4:5f:a3:9b:b7:2c:8b:69:90:9f:c1:8a:
e5:45:ac:9f:93:40:49:fb:67:05:93:32:d4:87:4f:7e:7c:6b:
66:87:0f:db:b1:a5:b4:2c:c8:d3:70:aa:e0:02:1b:28:39:36:
dd:1a:00:ec:db:37:60:51:02:82:8c:e9:91:0c:cb:ee:a3:d2:
46:4f:5b:db:84:68:ed:d9:f1:9f:e6:49:13:88:7b:64:ec:5f:
e7:ca:d6:30:a9:0d:81:52:51:5f:c8:30:a1:f0:c3:c5:04:d3:
a3:91:a6:70:0f:e6:17:b4:81:e7:40:54:ed:e8:94:2b:7b:53:
c1:23:85:8b:84:fe:62:80:d4:f8:59:9a:01:7c:fe:ae:a8:2b:
90:18:23:e3:b0:3a:56:38:f6:b3:25:00:c8:3c:dd:38:9c:09:
af:37:63:0c:d4:42:cc:83:b7:2b:48:6a:26:da:ac:e3:1a:4d:
fa:13:3f:42:de:66:50:6d:9a:64:4f:34:b7:60:da:fe:a2:a6:
af:a4:f1:e9:73:fd:cd:ab:c8:1d:71:c0:ed:a8:82:a1:86:49:
1a:34:d7:eb:10:da:60:73:a6:21:37:f0:51:9a:0f:df:d5:82:
f4:a9:bc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:51 2025 by rpki-client