Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier: PaqHAxtiYdzemoTgPb0hGi/0Vgz+6sRt/kttZh5uixA=
Subject key identifier: 5B:5B:0D:F9:CD:3D:3B:88:05:24:63:12:71:EF:25:35:96:B8:E1:D3
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial: 0194BBCDEAA0DD1706A243C770F556BDA79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: 8cifFYbDbhWLGRIi/lYifer228Bg4cSvTd57Z9ZKrtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:a0:dd:17:06:a2:43:c7:70:f5:56:bd:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=5b5b0df9cd3d3b880524631271ef253596b8e1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:c8:24:6c:4e:3f:83:9a:cd:6f:be:ed:e1:
ab:a5:f2:9f:7e:62:eb:49:14:0e:51:d1:c6:ef:2b:
0b:99:53:fb:b4:fc:50:ea:6d:1b:56:c0:15:d2:92:
40:80:f0:d2:c8:0a:61:ef:56:3f:c7:17:e5:11:0f:
e1:95:55:9b:63:c2:ec:14:55:49:1b:52:82:a7:24:
09:57:c2:6a:8a:1f:35:53:e7:5b:07:17:a4:b9:74:
3a:54:80:7c:7c:3e:f7:fe:7c:ff:33:3c:8d:59:5c:
8f:9e:77:51:e1:4e:38:f5:35:d7:dd:b7:8f:c4:d2:
fd:17:8a:38:72:65:2c:3d:9e:34:eb:f6:f3:02:21:
ba:a9:ae:35:d4:ac:8f:33:05:0b:f8:08:6e:ff:28:
ac:9d:ff:05:97:45:60:2d:85:ad:04:76:46:5f:5e:
2a:a9:36:93:ec:de:22:15:90:7d:6a:79:ed:3e:c3:
62:18:91:58:8a:ab:15:5e:11:96:dd:d1:b8:dd:f1:
06:44:9f:0a:76:12:6a:f2:70:dc:66:e5:bf:5f:28:
a4:06:a2:3a:16:4f:58:99:c2:bc:de:de:72:0d:d7:
70:3f:14:96:4d:7d:67:a9:d4:44:be:e3:8a:7c:4c:
5e:0a:42:34:d0:7b:7b:85:80:84:27:6f:a8:07:d3:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:0D:F9:CD:3D:3B:88:05:24:63:12:71:EF:25:35:96:B8:E1:D3
X509v3 Authority Key Identifier:
keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d5:27:18:ed:65:14:b2:20:2f:10:02:07:6a:b0:0a:1c:70:
d9:f3:5d:5e:79:5a:29:1c:fd:06:59:34:ff:c8:01:1c:a8:9c:
1f:58:33:6b:47:57:1e:f5:13:f7:32:01:1d:b7:f3:d0:64:9e:
c2:8c:27:57:46:5c:c0:3f:4a:91:b0:4c:b1:b7:61:83:e3:45:
d4:b0:9d:a5:af:ad:b0:cb:30:09:0e:6a:d1:a2:c0:86:a8:e1:
99:1d:31:e4:d5:51:83:b5:1c:fd:9a:51:80:af:83:bf:e3:79:
9e:de:4c:7d:3b:5b:e7:68:fe:ef:cf:9c:81:ba:c2:28:cd:4c:
b4:7a:ae:4f:84:ad:65:89:db:a2:6f:c3:62:22:53:62:13:9b:
c2:81:54:75:17:7a:d6:c6:61:92:0c:1d:97:ef:c3:cd:3f:18:
5a:2b:de:00:b3:1e:a6:ba:db:50:38:6e:bd:3f:ca:43:d5:56:
e4:d8:a9:68:85:6c:7b:44:fe:64:f9:3b:e9:1c:c9:f3:e7:5d:
2e:5d:ec:73:a2:fa:88:bf:0b:01:cf:5d:f8:c8:b4:9d:7e:b5:
e2:ab:fe:8c:39:52:71:6e:79:84:02:8a:11:fa:82:bc:45:6e:
66:fb:8e:74:3a:a9:b0:fe:36:a8:16:76:f6:f8:0c:1f:54:84:
b9:6c:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:13:12 2025 by rpki-client