Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: 5P39ua7+qLsCLEw1bEo86VIYJOtYUTF2TgATn/Z9o0g=
Subject key identifier: CB:39:CA:05:19:3F:4F:EE:5D:2B:77:4C:0E:59:13:52:12:13:D3:98
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 0194BCA9D4CE351681981974708A184AFA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: viwoiv4BaTxO94KQVIYhksAHiA4tasLG5fMC9trW4NA=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d4:ce:35:16:81:98:19:74:70:8a:18:4a:fa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=cb39ca05193f4fee5d2b774c0e5913521213d398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:d6:73:60:19:c4:85:41:e9:41:3f:70:a5:
1b:a2:42:b2:4b:9e:7a:85:1b:66:b6:21:df:a0:f6:
c9:1b:05:f6:42:49:73:0c:2a:cd:9a:c3:71:22:d7:
7b:6c:e5:6f:73:31:f5:1e:1d:f2:05:5e:91:b0:2d:
5c:ab:be:0b:4d:a1:70:aa:14:5d:3e:98:9d:84:07:
72:fd:b6:62:33:a3:48:6a:0f:c5:c2:cf:c5:12:7a:
85:96:c5:1c:0d:3d:82:73:f8:32:0c:6b:fd:08:13:
75:03:d6:af:df:21:20:45:47:ae:c5:22:9a:34:95:
6d:9b:72:6b:c1:dd:f7:dd:7a:22:25:e5:6f:fa:b6:
74:28:66:5d:9e:7d:b9:a5:80:59:88:b8:32:a4:26:
ca:36:1a:cd:30:80:02:43:b5:84:db:39:8a:3f:9a:
88:7c:dc:48:80:6f:ef:3d:f5:c3:79:c6:f6:a8:98:
5d:23:8f:e6:38:f4:6b:a5:88:69:9d:e5:32:14:65:
f3:9e:ac:38:77:6e:51:2b:85:d6:58:e9:03:f9:03:
8e:88:8a:9a:b4:8b:e4:94:12:ff:bc:44:0b:fa:9f:
c0:4a:6b:80:2a:05:bd:69:59:d0:48:1a:93:58:14:
91:1c:ea:79:73:81:eb:d1:b4:7f:5d:90:e1:77:2d:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:39:CA:05:19:3F:4F:EE:5D:2B:77:4C:0E:59:13:52:12:13:D3:98
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:97:ec:ff:74:06:f8:4b:e0:35:5d:25:1d:a8:e4:05:45:99:
89:51:a1:3b:0e:77:e6:02:e2:b8:8f:c9:87:a8:b9:27:06:21:
c9:de:69:a2:ba:0d:82:76:23:35:bc:36:1d:aa:ce:c3:43:88:
26:1b:da:47:a4:ce:e0:53:96:d5:bf:b5:a9:56:7f:3c:2b:4c:
09:b9:b7:e8:16:58:17:45:ec:a3:29:93:5b:96:69:7a:61:52:
b2:b5:49:56:c6:59:9d:06:1f:65:79:24:d9:fd:42:06:d3:7d:
da:38:e3:4c:e9:74:cb:18:61:e8:0e:12:0a:85:75:b2:89:e1:
87:72:60:93:75:ce:e7:5a:ef:0a:6a:3a:91:d7:24:72:e2:84:
ec:79:ff:3b:e7:8c:3a:d8:f5:bf:67:d4:46:48:fe:b6:7f:81:
dc:52:2d:7d:91:86:9b:42:a7:ba:0c:96:9f:c4:41:26:b8:d0:
76:4f:ed:5d:62:33:dc:1a:b3:38:ba:55:03:a9:d8:3b:84:8a:
83:14:31:44:b7:2f:ec:4f:84:bc:51:64:cd:08:27:dd:30:b6:
47:b3:51:f1:af:d6:d9:ab:7b:db:34:ac:54:b1:aa:80:4e:07:
66:26:7d:a5:54:16:39:24:74:b5:31:e0:28:c9:d6:41:a6:e8:
69:7f:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client