Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: d1XjNzgynMdhgH0WBkTAzAt+sB2ov1J5vIl3x00INbU=
Subject key identifier: 9A:ED:00:49:E5:80:E6:BF:58:DA:F2:6A:9C:6B:AC:67:53:5C:A8:C5
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 0194BC0517B6312F33C316320D5DB7AAAB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: TFC72kSZYmRFG8vHevfvqBo49Fes0mYZ+vRmsFJGoHQ=)
2: ZV9AgWO6uhagwHDD9I6tZkK9CXE.roa (hash: r40ZyDvHygBFDbvKP6P/hRu0VsEVvZUOQj6L+ANjkj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:b6:31:2f:33:c3:16:32:0d:5d:b7:aa:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=9aed0049e580e6bf58daf26a9c6bac67535ca8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:8c:57:75:dd:dc:c3:f0:3e:99:21:cb:43:
1f:02:a0:25:e9:07:c5:92:66:bf:f6:a4:73:e7:2d:
91:05:aa:79:21:b4:1b:ac:bc:67:ea:63:63:3a:8d:
9d:35:a4:f1:f6:f3:e6:89:12:4f:22:b1:06:dc:da:
aa:c1:fa:04:d9:2d:99:ca:0f:62:0f:d4:03:b4:f2:
99:e1:cc:4c:14:02:d4:7b:cc:af:4f:ac:be:fb:b1:
d0:f8:ae:c6:ae:78:5a:46:5e:37:c5:0d:f7:fc:db:
6b:78:0a:82:bf:cc:d2:fd:e7:63:79:04:b3:e4:4d:
50:dd:54:71:2a:67:4c:bf:f9:b8:e3:a2:a4:4d:5f:
05:9d:b0:64:d5:04:63:64:0b:e8:5a:d2:c7:60:ee:
5a:16:db:26:b5:36:15:11:b3:9b:49:63:83:05:df:
25:71:65:55:e1:5d:3f:2c:fd:ed:95:7e:6c:5d:04:
4c:d7:de:86:45:02:db:7b:8c:84:e9:82:9a:fa:4a:
30:55:f3:48:1d:b9:9e:30:85:57:d2:4c:f4:2a:c0:
66:0e:4c:e0:ed:23:ae:1d:18:e7:c5:75:70:ff:a6:
e5:1f:8f:42:e0:c2:48:d0:6f:7d:c5:a9:d4:5f:34:
8f:2a:14:3f:37:82:8c:9c:14:5e:ce:93:30:cc:72:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:00:49:E5:80:E6:BF:58:DA:F2:6A:9C:6B:AC:67:53:5C:A8:C5
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:a9:f6:a6:91:4d:6a:70:06:cd:33:b1:bf:61:78:c1:3f:
d3:da:e8:33:56:1f:05:d0:9f:bc:42:d6:72:77:cc:7d:15:d3:
09:e7:35:9c:1f:2f:9a:74:9d:4e:e0:80:3f:5a:12:6c:5d:e0:
ea:68:44:00:a1:aa:38:83:3d:25:d8:80:e2:72:8a:57:45:86:
ea:11:6e:3c:f0:a0:62:b7:c7:70:29:4a:8b:0c:59:4f:16:f0:
2d:2b:bc:a5:d4:c2:51:51:cd:b3:b9:43:55:8f:ce:d3:1a:bd:
e4:18:f7:62:ef:61:d7:13:b8:f3:97:7f:42:8a:87:69:43:9b:
c7:ef:ab:78:ee:65:d1:0f:de:7d:1e:2e:12:3c:d6:c1:21:c2:
36:36:4d:84:5e:81:14:a0:37:3a:b0:b6:ad:f6:9b:94:40:a9:
fd:0c:5b:5e:4f:86:27:12:48:1b:c4:5e:24:e6:df:9b:e5:0c:
f7:b3:b5:42:e8:9b:a2:b0:f0:48:90:44:03:64:3d:e7:8f:31:
c8:c7:d5:22:69:89:da:e0:7c:eb:d9:ef:fc:51:c6:e2:8b:0f:
44:13:18:bb:7e:2a:14:fd:51:da:2b:b4:a1:77:df:5c:e4:c0:
e7:1f:d8:1f:5f:8c:4d:92:15:ef:f3:5f:cb:60:70:ba:27:17:
b0:84:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:57 2025 by rpki-client