Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File: AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier: OwxGVIHrBFM9hGYezVsIeq2xa/lVpIfmNh9iLNFH6yw=
Subject key identifier: B4:74:5B:90:47:B1:C4:0B:BB:4B:23:EB:FC:C1:1F:55:5D:BC:88:E8
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 0194BD4E7C2F221F3D8341DBAB512A127184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number: 0DFF
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: /0QasYNzdAxBvZQ1mQPuIM+NqRSzBVX5SsEVSlvGJoY=)
2: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (hash: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:2f:22:1f:3d:83:41:db:ab:51:2a:12:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=b4745b9047b1c40bbb4b23ebfcc11f555dbc88e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:43:ae:2f:1a:a7:9e:87:7d:ff:33:1d:78:
49:6f:18:4c:8d:13:fe:58:83:15:4a:2f:93:a8:16:
3d:6f:91:50:1a:c6:42:f8:75:97:f6:11:31:92:5c:
de:b3:2e:df:c9:93:88:b7:4e:f6:b8:64:84:a3:26:
70:fd:bd:05:57:23:d5:c1:4d:26:d3:a4:59:de:18:
b7:eb:94:a8:71:54:5a:66:62:54:7b:61:00:8d:0e:
ba:5f:a9:a7:0e:7e:f2:43:15:50:39:1a:47:2e:e1:
28:b9:2a:a5:84:cb:2b:fa:d5:66:82:8d:88:9f:df:
ef:05:87:e4:a3:b9:a3:eb:fd:e1:17:9b:da:52:45:
0b:ac:9e:69:68:69:a6:d0:ab:d0:ea:65:27:81:84:
5e:86:75:a0:37:a4:36:4b:48:57:ce:51:3c:5f:fb:
99:86:73:f7:db:d3:dd:28:5c:95:21:0d:eb:39:bf:
79:93:54:64:f0:1e:5a:a9:98:8c:c7:ed:af:7d:42:
2c:64:5d:16:69:23:54:6c:54:44:55:36:fc:ae:93:
e2:68:8f:0b:52:32:4b:2f:26:7f:81:13:e1:dd:c1:
53:88:0a:24:9f:e7:86:71:56:2f:6b:20:c3:58:ce:
88:e0:8a:90:d0:99:19:5e:fd:12:e7:02:0a:50:cb:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:5B:90:47:B1:C4:0B:BB:4B:23:EB:FC:C1:1F:55:5D:BC:88:E8
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f6:a0:76:22:67:1b:e1:23:40:2d:b8:4f:e9:10:5e:2d:fb:
75:db:b4:90:3b:1e:df:13:a1:3f:cc:21:4e:98:71:2f:0e:10:
be:3e:55:12:f3:f4:99:e8:c2:e3:41:fa:33:a4:3f:6f:14:14:
34:ce:2f:ea:e0:e4:55:9a:4b:05:d6:62:45:82:fe:0c:e4:8c:
1c:fc:95:71:84:e3:4b:a2:58:c9:69:30:c6:c5:e1:d1:b3:7d:
33:79:84:c1:07:ed:54:c4:1f:5d:82:37:80:07:a0:9d:c8:dd:
6e:0e:50:59:3b:71:45:cb:d1:74:85:32:b3:56:1d:80:e3:03:
7b:fe:01:bb:94:0e:cc:af:37:4b:bd:1d:2c:ed:c7:c7:18:d9:
f1:e4:1b:d1:80:25:24:f1:c0:e0:82:fe:97:00:91:e3:9d:42:
8e:6e:fe:59:14:30:4c:10:ef:78:a8:5b:f2:1f:a6:51:02:56:
7b:f2:a5:d4:56:75:df:17:2b:43:d2:06:e6:12:61:30:3a:85:
29:39:b3:48:b9:d0:41:cc:2c:24:11:da:26:7d:35:6f:c2:54:
96:29:bd:f7:e1:84:b7:c8:e4:d6:98:d9:2c:87:d4:bb:2c:78:
a9:10:4f:a5:93:d0:38:79:1b:c4:e2:47:d6:7c:67:e6:4e:23:
db:74:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:58 2025 by rpki-client