
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: 2r9Sc4Hcg9PkEeW4zzBEivrpAOjbXVvkQ9efwmu5ll0=
Subject key identifier: 5C:6E:78:4C:98:41:3D:85:35:F9:6B:93:28:A4:CB:1B:80:B6:5D:18
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 0194BD4EBB9F120BA62A9B51927EEBA08D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 0DE6
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: smDicIYv4PejGduGvdS7k1gewcIZQzukA7OTiGzUuZE=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:9f:12:0b:a6:2a:9b:51:92:7e:eb:a0:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=5c6e784c98413d8535f96b9328a4cb1b80b65d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:f3:a1:9a:8c:02:fb:39:aa:f4:ae:8f:e3:
6b:87:c6:4d:d9:c4:a6:3c:7b:9f:11:c1:e5:ec:71:
0d:6c:2e:3a:ec:17:4b:ca:65:40:46:29:60:ce:ae:
01:a2:d8:cd:15:4a:8d:31:53:a3:6a:b6:ca:cc:50:
5e:2b:c1:43:09:55:24:9a:1a:68:ce:51:5b:bb:8a:
55:39:ad:f2:90:11:ed:6f:31:25:94:b2:9b:13:86:
95:70:c0:42:da:72:a6:1f:59:f6:98:d3:26:b1:49:
f2:84:50:2f:b6:c2:bb:e6:b9:01:93:fc:5e:ee:f2:
0c:d9:c0:aa:a0:b2:7a:51:67:64:d8:d4:3f:f5:e9:
70:0b:9c:9f:46:32:83:5d:b9:ac:69:f8:ea:ea:cf:
6b:30:9a:ef:c1:b1:09:af:28:a0:df:0d:9c:b1:94:
82:5b:6c:25:6a:d2:fa:17:4d:98:1e:3c:f8:c2:51:
7b:32:5f:1e:df:77:66:d6:5f:4c:77:17:4d:26:43:
0b:2c:38:2b:e2:bc:41:c0:00:4d:46:67:24:d9:f7:
b6:dc:f5:72:62:ea:a0:aa:5b:76:8f:88:1a:c0:94:
2d:0b:ff:dd:2f:96:0d:a8:6c:f8:a8:7a:c4:3d:a9:
68:7b:3d:f9:f4:bb:0d:79:95:2b:ba:ca:d3:00:fb:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:78:4C:98:41:3D:85:35:F9:6B:93:28:A4:CB:1B:80:B6:5D:18
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f5:40:0b:d5:d7:a8:12:a7:90:e2:69:a4:7a:df:3c:87:5d:
32:e7:8e:42:92:b6:dc:30:3b:81:5c:63:c1:14:b7:90:a6:8e:
d8:7e:39:69:67:48:50:03:6f:22:85:da:b7:bc:71:07:a1:6c:
68:03:f1:1f:59:99:5e:e4:e5:98:95:ae:5e:13:73:a0:a1:9d:
e0:b2:2b:61:83:a1:0a:6e:28:e4:e8:56:d7:b0:51:ae:4c:8d:
21:56:e3:b8:a8:16:bf:7d:c0:dc:dd:ee:96:11:3b:93:c0:37:
30:12:41:65:1d:90:5b:7d:54:82:35:fd:a2:8a:aa:ce:47:40:
f9:c9:7e:f5:31:55:1a:3a:fb:b4:1f:ae:5e:6b:62:12:81:1a:
19:af:77:eb:f7:26:f5:33:f6:31:71:5f:57:f6:fa:92:ea:0d:
12:e0:6b:cd:7e:ea:a7:e2:d2:c6:82:b8:e8:85:89:8c:25:c1:
9d:78:5d:c9:d8:5d:cb:87:ea:9a:55:7a:d5:d7:37:8c:02:d0:
a7:05:ec:60:e4:ad:1f:b7:64:b4:2d:c9:08:64:eb:c5:f7:64:
f0:b9:b6:58:ed:b4:7c:44:77:20:04:a2:c5:6b:df:75:41:da:
ca:0e:a2:85:0d:d8:63:46:fd:38:34:98:a1:d5:d6:ad:c6:06:
c1:9d:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client