Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: TIYnbh+uuwp8hzZbzx1Is2RBiaTt7RjmCsZKHMW/pcM=
Subject key identifier: 83:C7:8B:08:B0:A0:8E:C6:58:72:55:72:17:E7:FD:6D:29:E8:6A:30
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 0194BD8572421BFE4876D7B2EC395C05A2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 05FE
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: qMjyDmSOtjeSWV2YYGRioOI/nw8bI3A8mloxw88wUYo=)
2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:42:1b:fe:48:76:d7:b2:ec:39:5c:05:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=83c78b08b0a08ec65872557217e7fd6d29e86a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:46:11:eb:6d:3f:ac:70:e8:ea:51:c3:8a:
95:08:b4:59:79:84:3c:58:af:9a:75:43:2c:1c:6f:
ae:5d:59:35:c9:00:78:cc:42:54:c8:55:8b:27:e4:
21:42:13:d4:00:14:8f:c2:5c:59:c9:b6:9c:bc:48:
2c:78:00:90:12:b7:6b:d3:96:e0:88:d8:9c:b3:c3:
b6:1c:73:28:b5:fd:3e:43:01:41:1c:1f:42:6d:90:
6c:68:60:0e:f5:cc:c2:d3:aa:9f:f6:5c:84:a6:29:
ee:55:6e:c5:d6:f0:f2:11:d3:16:fd:23:78:6f:4d:
83:ce:9a:97:1c:02:5f:52:5b:fd:b5:eb:a9:d5:f7:
b2:39:8c:99:73:77:8d:f0:07:c9:78:16:aa:56:4b:
68:2c:4c:e9:98:eb:8b:ae:37:e1:13:f2:18:89:82:
f2:2d:bc:8f:9f:f6:2f:9f:26:b3:92:c3:90:0a:0f:
34:f4:2b:43:3c:89:04:94:fb:55:1d:cc:67:d2:0f:
24:2b:48:02:a1:21:ce:00:94:47:2b:8c:f3:d6:78:
82:58:6c:d5:98:53:a5:3c:97:53:61:5e:33:34:70:
d4:0a:d3:41:0d:b0:d5:36:09:9f:93:25:62:8d:fa:
49:1b:84:e8:f4:bc:d3:f1:07:4e:c7:f0:f3:cf:f1:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C7:8B:08:B0:A0:8E:C6:58:72:55:72:17:E7:FD:6D:29:E8:6A:30
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:72:6c:07:24:8a:f9:b4:a6:b1:74:20:d1:cd:83:02:29:
31:13:97:82:b9:98:ae:f6:39:0f:af:0e:06:c0:c7:ae:b7:d1:
7a:c6:85:92:cd:b4:8c:e0:f7:ce:70:ed:b2:9a:6e:62:54:64:
d9:b1:a0:78:eb:b3:7a:b0:96:7b:92:61:ff:1b:fd:dc:9f:66:
5f:6e:21:c8:6a:46:cb:45:8e:a4:9d:fa:68:be:90:a8:8c:cf:
31:e4:c3:8f:57:d8:96:4e:53:a2:32:db:25:ce:2d:c9:ee:7e:
7f:66:4e:be:9e:38:e1:b8:0f:e4:6a:4f:c8:8a:5f:58:0b:36:
c4:92:9c:e3:91:3c:bf:88:2a:51:77:ba:af:b6:7b:db:4c:56:
9b:25:f3:f6:04:e1:a4:78:9d:11:26:d3:81:9b:b6:4a:c4:2d:
f6:71:83:b0:a2:f0:ce:35:83:7a:f7:3e:a5:7f:64:30:0f:1e:
ab:b3:a0:7a:2d:e9:a8:1c:86:4f:b3:68:2a:5c:50:61:d4:62:
27:0b:d4:74:85:cc:52:83:6c:f7:75:9c:9d:99:4b:f5:5f:21:
cd:78:aa:c0:1b:4b:e1:92:35:ad:21:6f:f1:d2:cc:cc:ca:eb:
da:9a:02:da:c2:46:84:1f:12:ca:bd:64:d9:1c:8f:3d:6e:cb:
8a:ff:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:04 2025 by rpki-client