Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: JSXvVHiy0aOeRnUbnwbf4SvI2k2rLijmcAGtoBlDSXA=
Subject key identifier: 74:AC:4E:5B:67:EB:93:B3:0C:D7:42:E5:0E:43:A5:E7:44:CB:65:32
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 0194BD17F19A4ACD7C7D27C825082EEC3774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: IIHgOk-xRJwcMprOK7ZIwgTTTpI.roa (hash: vBVT2xA4TcumNVJjeZx7iYNAEhMSXyDbZI0yMb5mVq8=)
2: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
3: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: t69YG8fzy1VxW+bNWuyg+2pLALMkoKrXAl6b8Ipx3cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:9a:4a:cd:7c:7d:27:c8:25:08:2e:ec:37:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=74ac4e5b67eb93b30cd742e50e43a5e744cb6532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:1b:6a:16:0e:d2:86:e2:35:12:80:ce:71:
1c:01:8c:12:37:f1:fe:ea:ff:53:6b:a0:a9:0c:b0:
7b:be:3c:21:3b:90:50:2b:3b:76:5a:10:2f:a9:18:
95:c8:33:ca:82:1f:be:7c:fe:0c:9e:d8:82:12:4c:
a9:8a:5a:38:7d:6d:c9:6e:46:ed:c4:c5:3c:3b:3c:
ed:01:49:b8:af:10:11:a0:68:ff:97:7c:b9:ed:40:
31:aa:ee:db:16:ac:af:d3:8c:28:b4:27:54:d2:41:
86:01:bd:fc:57:a1:75:e7:f1:30:a4:50:03:92:ed:
15:57:11:92:8a:ef:62:65:3a:27:10:b6:9b:91:48:
30:cf:e4:fc:bc:b0:aa:1e:0f:3f:81:5f:ca:32:6e:
59:81:45:48:59:47:44:16:82:45:11:91:d4:3f:98:
4f:bc:18:ae:fc:19:a7:58:15:48:16:05:5c:fa:ce:
e5:77:f1:81:73:ba:2d:f1:fc:6c:11:a6:41:5f:0f:
be:77:ca:19:ab:7f:4c:f5:77:5d:b0:78:1a:dd:9b:
7e:34:b5:b6:fc:ab:66:de:ec:e6:d3:08:0f:aa:d7:
cf:47:be:19:7a:a6:18:e5:94:28:50:2e:75:51:78:
90:ce:de:d7:20:b9:97:0e:9b:a5:e2:e8:fe:da:1e:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AC:4E:5B:67:EB:93:B3:0C:D7:42:E5:0E:43:A5:E7:44:CB:65:32
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:5c:af:e7:cf:b1:96:99:47:03:74:1e:76:14:40:13:7a:
ad:8d:e1:00:d4:38:0b:5a:92:a2:70:93:57:88:53:43:8e:32:
00:12:b9:71:c3:cf:d7:bf:23:02:f7:6e:ae:38:24:1a:18:ac:
34:c0:e0:8b:d3:26:8f:e5:a4:d3:47:37:0b:3b:08:df:ab:a5:
94:af:ec:09:82:2c:58:37:14:81:d2:1c:f9:8a:ab:82:50:7b:
c4:48:d4:8d:53:b5:22:24:0d:82:74:f8:59:40:28:eb:fe:75:
88:08:bb:f1:c7:68:88:57:22:ca:c3:03:36:0f:f5:e4:1a:e4:
7c:8e:50:bc:27:b7:bd:59:65:d1:d3:f2:18:df:9a:78:d7:36:
72:9c:0e:76:06:59:ab:4b:4f:50:4c:97:ba:6a:5d:0a:87:69:
1c:d9:04:a2:f2:75:a1:6f:26:db:c3:13:1d:4a:40:c5:e1:97:
ed:56:8c:83:6f:68:05:26:1d:ab:eb:3a:1b:f6:fd:16:13:09:
03:7c:fd:91:00:1a:34:34:46:8d:f0:ce:17:c3:46:c3:c9:dd:
ae:4b:b8:58:df:6d:88:60:44:79:2d:0a:3f:69:fe:2b:23:52:
26:f2:e7:01:e0:bf:f1:73:6b:4b:d7:70:e3:14:c8:cd:40:c3:
6f:2b:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:29 2025 by rpki-client