Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier: kAj2o0IdP3TPvVttiIFycqlIspLZlXoxsyxssD8UXmI=
Subject key identifier: 98:7E:54:E5:82:DB:DA:81:90:2F:60:35:70:AA:34:05:85:23:93:34
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 0194BCAA3475F3851711E7E095463E7E7DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number: 118C
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: 23DZ4u7d8RNheXt+sNJYluaVHZt19Rr31QHvreIlsVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:75:f3:85:17:11:e7:e0:95:46:3e:7e:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=987e54e582dbda81902f603570aa340585239334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:c6:0d:0c:b6:4e:5b:fe:f3:ac:66:41:b7:
0d:bc:d4:df:eb:70:f2:05:4c:80:05:71:ff:ad:2c:
8a:0d:eb:4f:f8:92:9d:6d:3f:0f:e6:23:dd:13:dd:
c1:88:df:73:09:12:a9:ec:b6:82:3b:70:73:66:a9:
10:65:0c:fa:eb:ea:bc:b5:11:83:45:69:87:ea:e0:
f5:da:8c:f2:7d:07:57:e2:05:13:f7:3b:b8:59:d0:
f9:e8:c5:a6:fa:12:0a:73:8c:99:65:36:aa:cc:81:
01:34:2b:4b:0b:b2:7b:50:77:fa:39:b2:fd:b6:77:
c5:b3:51:ea:e9:08:34:68:0e:4e:a0:b2:df:a2:49:
71:78:7f:50:4c:54:bc:7e:f7:51:dc:b5:c9:dc:46:
b9:dc:7c:9a:b8:36:3c:57:ef:11:20:27:7f:48:90:
ca:c4:68:b5:b3:96:d1:a2:8f:9b:61:dc:40:45:db:
e3:31:f4:bb:81:a7:bd:cf:74:1e:fc:04:cd:ad:c0:
b4:34:c0:10:d9:3d:c7:52:3e:a4:9d:2e:1e:cc:72:
7b:31:5b:9a:82:08:e8:33:c4:a3:05:62:16:78:1d:
ea:99:c4:db:62:0d:97:bb:f9:23:a3:2a:36:82:e6:
3a:0c:be:4e:3b:67:4c:2b:a3:44:9b:4c:51:00:df:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7E:54:E5:82:DB:DA:81:90:2F:60:35:70:AA:34:05:85:23:93:34
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:17:b0:11:12:01:fb:e2:20:5d:c1:02:9e:5a:7e:f3:7b:
8f:bc:4b:70:21:8c:36:bf:36:52:c1:47:73:6d:7b:0d:d3:20:
da:3c:35:7c:bf:e1:72:85:31:94:24:68:1c:7f:bb:34:69:d1:
33:61:53:51:70:34:17:62:8e:e1:31:fc:d0:70:9b:be:42:af:
86:38:62:2f:a4:02:db:94:12:4d:b1:35:14:f8:03:8e:49:32:
9c:b0:68:fa:be:c4:2b:a4:e8:8f:bf:d8:2d:b0:1e:cf:08:d3:
d0:1a:08:43:d6:22:98:07:47:5c:b7:c8:80:f8:a1:5f:4a:7d:
db:4e:04:e9:15:89:8b:37:f1:6f:92:c4:1f:df:25:82:58:c7:
bf:ec:e7:c1:18:c0:82:66:69:14:ce:5e:05:87:2a:49:0e:ca:
6e:82:3a:f3:0c:80:64:0e:6d:2f:cf:69:48:95:30:c7:4f:0e:
d5:35:25:d6:6e:c8:90:61:5a:59:ce:92:16:06:4c:f0:54:7e:
aa:fe:d6:10:9e:7f:03:7d:80:85:5e:bc:56:ef:b5:92:78:18:
8a:17:0f:4c:4a:52:77:a9:12:3d:57:f5:59:f3:0d:e8:ec:27:
0f:cc:5c:0c:8b:57:c2:4f:73:b4:1c:12:31:5f:b7:3f:ab:6b:
83:f9:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:09 2025 by rpki-client