Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: 4i2nKhU6TkI5ELi6bFcSwRT501+tjRi86OoqNqCeWgk=
Subject key identifier: D0:2E:00:0D:B7:56:4C:89:F5:EE:F5:5B:07:C0:87:4D:97:F4:62:43
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 0194BD8537B922431E4517D5F680421ACB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 0143
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: ta0g+zzc+pzCvRHUO1QQUeDObolDNAarBbD/4qtv7Qo=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:b9:22:43:1e:45:17:d5:f6:80:42:1a:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=d02e000db7564c89f5eef55b07c0874d97f46243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:8e:77:64:ff:df:fa:c0:f9:6b:1f:cb:dc:
8d:d2:ff:3c:c7:e6:ca:a1:e8:3c:95:25:88:da:df:
fc:36:84:f3:2b:4d:08:c4:f4:bb:ee:fb:41:a8:fe:
19:89:83:7d:56:06:6f:a2:10:d9:28:f5:08:a5:be:
2d:73:2f:02:d4:16:ee:e0:13:d3:2c:c2:55:83:85:
95:42:ad:72:4c:e5:ff:1a:25:7e:65:70:b2:0b:e5:
13:51:d8:68:d3:ca:d7:57:0b:3f:ad:69:09:84:13:
20:9a:94:31:d1:ec:de:3a:91:da:9c:ea:a9:55:25:
8d:a3:6d:81:75:b4:b7:74:05:28:20:7c:30:98:60:
65:9d:af:54:98:2a:66:2a:34:13:37:df:e9:49:55:
61:ff:43:6e:cc:8f:ab:30:1e:51:ae:dc:4f:39:80:
46:7c:b5:c5:fd:e8:02:76:6a:4e:e7:b5:49:36:fd:
17:1d:59:5f:18:e8:bb:64:fa:2c:6c:94:56:eb:ba:
1e:61:02:cb:eb:6c:01:4f:0d:22:79:c2:4c:2a:da:
52:e5:c6:11:71:66:4b:7c:df:04:76:df:17:06:cd:
fd:8d:71:f1:81:78:a0:f4:26:4e:a3:d7:d0:59:49:
72:a3:36:66:e9:2b:0b:44:11:a5:88:c3:62:d7:16:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:00:0D:B7:56:4C:89:F5:EE:F5:5B:07:C0:87:4D:97:F4:62:43
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e1:69:c8:f6:36:5c:7b:73:cb:98:e0:f5:15:87:4c:4a:e0:
6b:60:7e:8e:8d:c1:37:37:5d:d4:09:ba:ee:29:09:46:8c:c2:
11:49:66:3f:16:aa:e4:92:e1:1b:36:4e:23:4b:9e:2e:c3:ed:
13:63:92:d9:92:51:74:c1:23:24:80:ee:bf:8b:ef:82:cf:1d:
af:8f:fc:fc:d4:a8:99:97:4c:40:c1:10:fe:e6:b8:60:31:cf:
53:d6:a1:2f:a4:e2:8f:86:39:89:3f:4f:6e:04:8f:41:db:88:
19:9b:94:ba:6f:95:2b:25:de:db:25:67:e8:c7:6e:79:bd:a2:
64:19:96:a2:33:97:40:53:e8:cb:12:1d:91:b8:e9:cb:bd:1e:
5e:83:03:39:9a:b5:78:e4:b5:a0:80:28:4d:1f:5c:84:17:70:
af:cb:a4:d5:51:04:76:67:c7:61:cb:49:01:d6:e8:81:c7:6b:
46:e4:b4:17:68:30:65:6d:5e:42:c7:cd:3b:4c:90:8e:b2:6a:
ad:9e:bf:12:37:3b:8c:db:eb:ff:4e:02:ba:54:10:4b:2a:17:
4b:c2:bc:97:41:0d:99:f8:62:ae:44:24:d4:cd:ad:e1:6c:17:
f1:e6:9d:55:65:3b:7b:04:44:e9:09:99:62:37:ff:41:24:45:
1d:7f:c2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:29 2025 by rpki-client