Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: NQFbS8XBzmjnHgKIur+vL3u24XhbQeNgl/7G0xymJa8=
Subject key identifier: 31:7B:49:D9:F1:78:69:3C:FE:F6:BC:69:A8:E8:FB:6F:50:3E:E7:8F
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 0194BBCDF21D76494E79E2475923BF1FED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: kjEPsHjPJpau6nUTgrtYkX17YfYBceBPprcmewZnvC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:1d:76:49:4e:79:e2:47:59:23:bf:1f:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=317b49d9f178693cfef6bc69a8e8fb6f503ee78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:58:dc:98:66:a3:16:8f:73:37:ca:51:5d:
0a:b6:c2:b2:e1:2d:bd:05:84:1a:95:11:9e:02:ff:
8a:33:70:67:ad:bb:47:15:fd:17:3e:ed:27:f8:f8:
58:03:e3:08:4d:a5:dd:1e:1e:22:a6:76:7e:6b:eb:
b6:eb:8c:24:ea:62:91:74:94:aa:1c:df:d3:8c:82:
95:3a:2e:f6:f5:26:c0:f1:14:1b:c2:18:74:de:f9:
70:e5:e2:b3:d5:dd:d9:1e:6d:8d:68:2a:25:7f:1e:
97:ec:73:ad:13:71:dd:bc:12:27:0b:c1:1f:16:3b:
e3:bc:82:13:f7:a0:06:d6:7f:f9:5a:4b:82:2f:c4:
d4:6f:43:a2:a8:51:45:b4:76:a7:6a:b1:10:ec:6d:
d2:99:cd:86:52:8e:b4:55:55:3b:ee:16:b6:7e:94:
be:19:ec:4d:16:63:fb:bf:19:a3:b2:ca:46:16:b6:
3f:41:05:08:7f:03:12:a3:e2:26:75:12:df:85:b9:
e4:d0:27:37:7c:8e:b6:89:20:18:50:c2:08:b2:43:
59:1f:f9:48:90:96:e0:85:bb:d3:a5:97:4f:43:f9:
dc:0b:64:2c:03:17:2e:97:f0:0e:dd:32:6d:11:50:
07:79:24:91:f7:cf:8c:ae:7c:3c:1d:76:c2:53:7b:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:49:D9:F1:78:69:3C:FE:F6:BC:69:A8:E8:FB:6F:50:3E:E7:8F
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:4d:7c:13:28:39:95:87:45:24:81:9a:3d:8a:01:cb:b2:
75:ea:cb:7e:3e:e3:29:52:cd:19:4d:c2:9e:a3:04:34:c4:c9:
af:af:5a:85:a4:6f:f3:76:cf:9b:b0:3d:a7:3e:ac:03:18:14:
40:45:d2:e7:d8:06:66:23:b4:5c:b5:30:44:bf:66:68:06:6f:
e3:9b:e6:8d:5b:2a:ee:42:ec:c2:cf:af:e7:bb:e1:b0:57:be:
34:4b:10:7c:b6:45:25:be:44:4a:e2:6d:7f:4c:7f:4e:2d:81:
5f:f9:33:f3:e1:3b:2a:63:ac:7f:13:72:ec:67:b9:ba:7f:74:
30:01:0d:fe:d0:df:76:ac:13:a6:6a:93:0f:37:d3:2f:ed:34:
7a:2a:27:c7:67:3e:8e:e9:cb:77:f4:fa:de:5e:92:b1:55:af:
ee:77:0e:db:77:60:40:a9:23:a7:9d:ab:af:2e:36:e8:28:12:
fb:0e:4f:79:0f:fc:7a:f6:4e:d1:79:a3:3f:84:4a:09:1c:71:
03:b7:e3:58:92:e9:15:a0:76:be:fd:36:e1:99:f2:c4:64:fc:
83:cd:6a:72:41:ca:7a:62:82:d5:ce:73:cd:f3:6a:6a:ec:b9:
f0:de:d7:76:70:8c:49:b5:33:b5:cb:fe:9f:17:8d:46:98:fa:
67:81:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:03 2025 by rpki-client