Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: d1ijlAp5w/xcvcmzlgel6Q9g0GQK8xQePq69mB9gyo4=
Subject key identifier: A9:71:C8:E8:4D:C8:0D:A4:84:C6:7A:F2:F1:E4:7E:06:DE:AE:CE:4B
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 0194BCA96C89EBB01F16155AD5B4DD59AB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 0DC0
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: 2Geh3VJMaTip+eDgN07Ap+3/rLzKYD/r/jxEM0yK8f8=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6c:89:eb:b0:1f:16:15:5a:d5:b4:dd:59:ab:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=a971c8e84dc80da484c67af2f1e47e06deaece4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:6f:5b:02:d1:d6:65:18:22:67:f8:e4:13:
04:cd:00:e6:6e:72:4c:43:46:e6:14:f1:fc:54:52:
36:84:6b:f8:f0:03:6f:1b:61:8f:f9:63:80:23:5d:
75:91:41:97:ac:69:ff:ae:bf:70:b5:b9:b6:fc:92:
c6:88:72:f6:98:b5:2f:98:95:0b:ad:c7:05:44:87:
ca:46:bf:e9:16:37:bf:81:4d:6c:0b:7c:85:55:d9:
da:c1:8c:9c:16:75:e2:c5:6f:a3:1b:a7:6c:2a:88:
bd:28:a2:86:82:f4:4a:96:a3:8a:8a:6e:f9:60:6f:
db:4a:f5:19:f2:f5:2e:46:59:3f:d9:9e:3c:4b:9a:
fd:a4:dc:04:25:8d:f5:80:b3:ae:87:ca:3b:af:f9:
72:ba:d3:e1:13:ce:b0:8d:1c:99:04:81:2d:1b:f0:
b2:45:c1:bb:bc:1b:b8:38:72:07:5a:de:78:a2:c7:
30:ed:da:8e:61:90:88:a9:0a:bb:91:de:e0:8e:0b:
e9:99:a7:0e:ed:7c:d1:e5:3d:99:c4:31:d3:82:07:
ea:6a:e2:92:9c:2e:bc:c9:f8:fe:24:7a:24:9b:02:
18:39:b2:82:ed:f8:61:03:b2:4a:d5:cc:00:11:9a:
c8:dc:84:5c:d9:f6:f3:c0:a3:cf:e0:91:32:b3:a6:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:C8:E8:4D:C8:0D:A4:84:C6:7A:F2:F1:E4:7E:06:DE:AE:CE:4B
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:2b:ff:17:fe:5f:ae:c2:92:00:f7:f8:3a:c3:1e:9f:11:
8b:b0:90:9c:4c:06:51:57:fc:ce:db:0e:5f:f0:79:46:76:82:
fe:d3:53:01:25:ae:90:58:93:cb:6a:8b:46:bf:0d:13:a4:77:
a3:76:37:0c:5c:df:d4:21:82:4d:7c:71:ed:cd:e7:20:cd:45:
86:27:4c:ee:c2:0b:f2:cf:5e:0d:76:18:c2:41:a6:82:db:a6:
7a:ff:d6:a1:72:f5:bf:db:d3:26:4b:f5:80:05:c5:7d:95:16:
8f:c8:3b:66:9b:fa:32:dc:e2:7f:aa:0a:5f:ec:59:b8:76:75:
c6:01:92:73:3d:6f:68:fc:18:ca:5a:d8:06:ec:ed:ac:c9:b0:
13:83:ba:71:a9:ab:94:f6:b0:11:8c:1a:ad:f7:81:c7:35:a8:
50:05:7c:d0:e0:e2:5b:9a:13:51:b9:16:34:d2:79:18:96:ae:
1b:45:b8:9b:74:ef:fe:ca:20:7c:ff:97:d5:d9:78:c9:3b:3d:
fb:3b:8e:a8:63:93:07:c9:d6:68:c7:4f:d1:cf:47:0b:1a:4a:
8e:9f:8b:13:90:d9:5f:80:75:40:93:cf:bf:3d:23:b5:38:73:
2f:43:2b:91:35:df:a4:86:4d:b4:5a:85:99:eb:a1:2c:22:f2:
a3:ab:a1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:23 2025 by rpki-client