Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: YQ49yMuBL80xQypUv80mPb+5fN1X33SIuI2G2p+8/dc=
Subject key identifier: 39:78:10:C6:69:7D:28:49:EF:55:92:8E:65:8F:58:2F:DB:77:96:88
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0194BC04D4532310614861BBDDDC5F03CE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: 8hxRl0hSa8F6Z4MvIdT9g59bEPpYyQAer8cZ4cf5wGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:53:23:10:61:48:61:bb:dd:dc:5f:03:ce:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=397810c6697d2849ef55928e658f582fdb779688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:72:e8:a0:d8:6c:3e:2b:37:45:f9:5e:9b:
c4:ce:a2:ad:a0:e0:7f:21:5c:e8:b8:b8:87:69:cc:
aa:72:28:57:7b:87:6e:ce:c8:86:bb:e4:c9:a1:74:
87:1b:0d:07:50:16:5e:a4:b5:45:28:44:29:54:6b:
cd:d4:0c:24:37:da:71:5d:8b:06:bf:6e:bc:6f:15:
6b:56:8f:db:85:83:15:c6:62:a4:80:ef:eb:5e:14:
49:e3:12:5e:10:ab:5d:bf:f6:65:59:8d:db:34:d0:
38:3f:f2:26:1f:07:4a:b0:02:b5:db:89:22:c5:28:
a6:98:9f:27:a2:e7:55:58:2c:3a:90:04:d3:04:d2:
3c:c4:07:6c:c5:5e:3a:a8:1c:00:bb:ba:b7:b0:dd:
65:0b:0c:9e:84:79:2d:b1:5e:ec:04:56:f1:4a:6c:
5a:22:18:92:5f:75:d3:65:a1:df:17:00:6d:fc:58:
15:2d:00:29:f1:cb:a7:e7:51:87:6c:3c:a6:db:ae:
7b:aa:86:4b:06:18:a8:21:3c:fb:0d:74:ee:62:a4:
e3:a3:ec:9a:c0:a9:c5:32:61:c1:54:1f:b3:c9:ec:
e0:f0:88:33:4e:b6:f0:65:14:f8:1f:dd:0f:cf:5c:
78:36:d0:3b:55:ef:d5:e2:c4:cf:51:5b:72:a3:d0:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:78:10:C6:69:7D:28:49:EF:55:92:8E:65:8F:58:2F:DB:77:96:88
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b9:39:f0:ee:78:af:07:da:2b:f6:9f:bc:d0:09:c6:8d:32:
a3:71:fd:65:9d:f0:e9:0a:6b:2b:bc:f2:1e:41:69:e0:be:2f:
fc:73:78:44:c0:a4:50:59:ef:0d:32:eb:63:0f:5a:2f:a2:94:
83:58:0c:8e:4d:9b:e5:3e:20:92:62:7b:44:7b:5b:1f:10:88:
c1:3d:7d:e9:24:e4:59:f3:46:7d:65:7d:a3:50:0f:b9:67:76:
1a:07:30:fd:8f:e2:43:e4:58:e0:65:f9:38:7f:3c:e8:cb:d9:
4d:f8:98:0b:21:02:ef:84:e0:f7:f8:6b:fe:84:ba:4f:72:39:
0f:7b:83:67:7d:e7:96:dd:63:33:0e:ae:61:aa:55:41:47:a7:
95:ce:1e:8a:f6:cd:38:cb:f4:28:ab:fa:4f:c7:fc:49:b4:f8:
1b:0a:30:7d:b1:51:02:3b:7e:49:c5:13:96:5f:b6:27:f1:76:
af:dc:7f:68:97:e6:cc:18:3d:49:ee:26:4e:1f:6a:80:46:74:
86:d1:08:d3:62:9e:d2:bb:13:80:77:75:99:6f:1f:9e:05:df:
fa:61:37:25:e9:09:57:00:44:c8:7f:a7:f7:30:0f:0d:8f:d0:
1d:89:99:92:39:25:39:e5:f1:78:1a:7f:d9:23:cd:36:cd:72:
be:8a:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:49 2025 by rpki-client