Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: ESaWnQeLSMNaZu2Z3V7N3fU21hdPGWVW03XAq17xE84=
Subject key identifier: 21:B4:2F:82:77:1F:E2:AF:02:12:4E:7D:3F:12:17:B7:72:C5:72:E4
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0194BBCE3D5E542AE77AAFE7337E78A493E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: sEMOWAKzGpDlTgBWVKf2JH2Q6Ed4N/DMUx2IPmfkNoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:5e:54:2a:e7:7a:af:e7:33:7e:78:a4:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=21b42f82771fe2af02124e7d3f1217b772c572e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:54:da:a6:fe:9b:5c:1f:7f:46:ac:2a:f5:
c5:9e:b8:72:43:02:ff:46:93:bf:6e:ed:f4:e0:e8:
3f:a1:e6:f0:ff:49:db:82:72:93:d8:4d:81:b8:29:
7d:89:e2:f2:c5:e8:43:22:6d:23:69:98:3a:f2:cf:
eb:51:08:a8:bb:52:b1:ae:bd:4e:b9:ed:d0:c6:3c:
2e:12:9a:b5:00:26:68:45:24:ff:bd:3d:e1:45:4a:
4e:c9:45:e0:f3:f7:be:43:e8:c9:7e:d0:f9:1c:4e:
9d:48:61:c9:f9:de:6f:10:b1:46:1e:de:a4:de:76:
97:47:40:7e:fc:4a:cf:5c:4c:27:31:7b:d8:3a:fe:
56:00:ac:a6:03:64:9b:9a:82:6c:d1:24:08:ac:8e:
00:12:95:fd:39:04:0e:30:3d:d2:ee:ae:fc:08:c3:
37:8e:55:5a:49:62:3c:59:54:19:17:a3:a9:ac:03:
bb:8d:d0:b8:a4:75:15:10:cb:f1:98:60:5b:b1:f9:
a6:9c:66:16:bc:74:a4:c0:64:57:9b:1b:ca:10:de:
2a:ad:aa:54:6b:f1:3d:ab:a9:5c:ff:cb:8a:dc:c8:
8c:2b:0c:db:58:98:be:64:67:7a:d6:97:3b:e3:62:
9c:c0:4e:8a:9a:54:7c:1a:ba:88:b6:3b:29:37:9f:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:2F:82:77:1F:E2:AF:02:12:4E:7D:3F:12:17:B7:72:C5:72:E4
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4f:7b:9b:36:eb:a0:4c:c6:ed:f4:bb:2d:2f:21:e8:44:03:
34:e3:d1:79:c8:54:e4:09:a4:41:10:43:56:82:83:46:c2:d8:
eb:1f:ac:80:d0:b0:8c:7b:03:d7:0a:cb:61:69:d6:2d:3b:8f:
4e:cf:65:92:bc:de:92:35:52:a7:b3:ee:cd:b6:52:9e:d8:4a:
d3:a4:fc:16:09:7b:47:90:a0:75:5d:b9:e6:3b:63:34:d8:7a:
98:60:26:79:ce:89:e3:46:2f:db:5e:13:d1:98:fa:0d:1c:b7:
b1:df:f3:eb:9d:9d:97:55:b2:42:d7:d5:3e:f4:60:73:b7:ab:
be:cb:09:ba:2f:27:c2:5d:37:aa:8a:53:a9:c3:60:e0:cc:3c:
56:37:84:89:7b:28:16:c0:fa:da:6c:0f:56:d4:db:6e:fa:61:
47:9e:7d:42:bb:af:d2:15:3f:36:7b:2d:84:c8:b7:72:bb:c3:
f2:1c:eb:33:93:fd:40:45:34:7a:44:7d:ff:af:52:e5:fb:0b:
64:5f:06:d7:4a:87:97:c9:5d:6e:1f:a9:eb:57:1b:f8:8a:bf:
da:8b:b6:d3:be:39:15:5d:65:a5:ce:ff:c6:e5:8f:ce:08:24:
d5:8e:e0:44:f0:a8:3b:44:57:18:04:9b:47:83:90:61:dc:99:
f4:01:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:54 2025 by rpki-client