Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
File: _qLamRGzG_Ww1hSRL9v5W_HXA1s.mft (raw, json)
Hash identifier: ru0CYCj8s2WrayDzKQ6+NArcCFoZMEyJZK7s02+l7zM=
Subject key identifier: 19:7F:D8:C3:F1:07:5E:35:0C:B8:BF:9F:7F:01:84:92:1B:50:B2:E9
Authority key identifier: FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
Certificate issuer: /CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Certificate serial: 0194BC3C4635EC7FB4FE8EA1F50CBE0BB793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
Manifest number: 03D3
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: LVji7-hNinMvh2uZfU9itRxK6Eo.roa (hash: yz8p8NyEKPeKdywG9T51h7CGBtQCcml/qAuFdNgc+wQ=)
2: _qLamRGzG_Ww1hSRL9v5W_HXA1s.crl (hash: 2+WGQ76JmrWJPFmuAi/yA96VCUPjdAxBmKE7aQuK/Rg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:35:ec:7f:b4:fe:8e:a1:f5:0c:be:0b:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=197fd8c3f1075e350cb8bf9f7f0184921b50b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:b6:54:47:a3:7e:c3:1e:70:b7:44:6c:ca:
2b:53:66:4d:93:ab:1f:42:5e:4a:28:e5:be:f8:10:
a9:9f:27:9c:c2:e8:b9:df:ab:13:97:7a:d7:59:2c:
12:f4:dd:ca:65:b9:5a:3e:b2:42:ac:61:8c:2f:ab:
3f:4d:2a:ab:00:ce:6b:69:7a:73:91:e1:7a:30:e3:
05:0f:fc:75:de:5a:8b:be:52:4e:d4:a3:04:f9:5d:
95:38:cd:21:82:96:d6:fa:06:d9:da:90:fd:fc:c8:
8a:6e:4a:3c:c6:88:7f:eb:83:c9:0f:5e:7f:ae:84:
38:8a:1b:65:16:58:4c:1f:7c:54:e1:97:ad:57:96:
3d:e4:b4:dd:0a:19:a3:6a:bb:76:90:ec:9c:35:63:
4c:0b:33:c3:c8:bb:2f:dd:93:01:76:74:3d:ee:e1:
1d:b6:77:5d:27:04:3c:85:91:e9:d1:22:14:45:e1:
93:ec:73:f7:a0:84:9c:23:bf:88:dd:6c:8e:87:9c:
51:f4:21:12:89:6e:b7:6a:db:bd:b4:7c:0d:29:7b:
1d:f3:90:c4:aa:cc:03:c2:8c:41:b3:30:99:56:17:
14:22:98:12:0a:ce:78:c8:ed:10:6a:6a:b9:42:4d:
7f:2a:7f:a3:b7:c5:a3:56:63:8d:7f:96:12:0e:eb:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7F:D8:C3:F1:07:5E:35:0C:B8:BF:9F:7F:01:84:92:1B:50:B2:E9
X509v3 Authority Key Identifier:
keyid:FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:94:12:d4:cb:b2:84:7f:f2:38:33:17:06:4f:b4:6d:a3:0c:
ae:4e:26:c3:9a:eb:26:8f:a8:07:dc:12:f5:59:55:e9:c0:0f:
28:34:9d:bf:39:25:1c:0c:75:03:ac:9e:9b:c6:8d:f7:73:6c:
41:4b:61:67:8f:db:be:b6:a1:03:64:8e:ad:2d:65:f9:28:ae:
67:7a:f0:e0:b0:6f:9a:cf:0e:a1:49:aa:64:0d:95:68:df:61:
6e:35:6b:54:7b:be:85:85:cc:c3:12:30:50:a3:21:43:ce:4f:
21:02:73:67:20:f6:04:e0:b7:53:11:d4:3c:3c:df:ac:d7:46:
82:50:7c:19:0f:a7:70:bc:49:c3:b2:29:03:15:9b:0e:e5:b3:
38:79:69:f8:98:14:a4:cf:b5:68:1c:c4:3c:35:a3:1d:dc:e2:
15:4c:89:11:cb:8c:48:fe:62:4b:d5:45:fb:7d:cc:cf:9c:4e:
88:8c:e6:fa:1a:aa:fb:62:db:bd:d9:02:ea:22:ce:2f:df:84:
18:33:11:0a:2b:3b:d2:68:2e:e9:f8:10:f8:ab:37:72:7c:52:
6d:ae:10:78:18:53:02:91:00:0c:c0:eb:f0:03:70:45:c1:7f:
fc:62:99:b4:fa:67:7b:46:2f:56:6e:30:ce:98:cb:a2:d3:e8:
1a:4b:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:33 2025 by rpki-client