Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json)
Hash identifier: 6y/WHHHWTmar3NDHSi/jOmzymsQ+Up5eDCbKF+taCAQ=
Subject key identifier: 46:22:DC:FE:78:AC:76:AB:A7:06:D2:33:88:BB:0A:EA:6B:6D:A9:ED
Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Certificate serial: 0194BC7306478329DE891F0B6260DF0473AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=)
2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: rN3gk8+4SCacieYEecV0YPY5VIC8LwXzN8ega8zB8zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:47:83:29:de:89:1f:0b:62:60:df:04:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=4622dcfe78ac76aba706d23388bb0aea6b6da9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:e5:72:c7:33:8e:f1:53:a2:11:d4:c5:55:
62:ea:be:6b:50:f1:5e:38:29:cf:4f:50:f6:a2:93:
07:94:02:73:f3:dc:4e:75:f0:c7:fb:1f:32:d6:60:
c3:a2:a7:e4:a9:d1:8c:c9:93:3a:ed:32:55:56:af:
f4:28:13:c9:31:2f:47:ce:59:8d:b3:43:79:c7:9d:
d8:47:9c:1f:33:8c:5f:f5:43:69:01:b4:e0:4a:8f:
82:4c:68:1a:6f:c8:93:2d:30:c5:49:50:34:af:97:
3e:9d:04:d7:e5:52:dd:c0:3c:85:8e:fd:98:b6:be:
ef:1e:c1:de:07:a7:ee:c0:18:5b:c8:d5:63:b8:e2:
35:e8:a0:d1:e9:55:17:65:dd:6f:e4:c8:43:a5:98:
61:8e:10:d2:b8:7d:e1:7c:63:9a:25:e5:b3:85:dc:
59:91:71:56:30:60:87:53:fe:d5:cd:6e:36:06:08:
2e:66:13:71:fc:cc:e5:e3:34:aa:80:2e:df:07:52:
34:70:16:63:7e:18:27:5b:14:49:9b:f9:66:eb:fb:
93:06:75:1e:5a:13:93:9b:b3:da:f3:3c:0d:7b:f6:
ff:7b:00:dc:96:81:ed:f1:a7:eb:58:66:38:5d:38:
fc:92:98:68:ed:02:91:65:86:fd:87:e8:10:2f:d4:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:DC:FE:78:AC:76:AB:A7:06:D2:33:88:BB:0A:EA:6B:6D:A9:ED
X509v3 Authority Key Identifier:
keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2d:9f:72:66:9c:ec:28:0e:81:e6:36:9b:07:23:2d:07:1c:
6a:b3:db:1a:21:e4:6a:1b:7c:c7:a9:a1:3b:48:62:98:25:0a:
18:01:e6:74:7a:7e:24:64:aa:9a:ce:61:02:7e:b8:d8:5d:72:
36:0b:5a:fe:5d:71:bc:7d:1c:86:e8:59:ce:b1:fa:4d:de:9a:
d3:1d:19:e7:37:69:4f:e0:74:32:86:79:38:98:7b:4e:65:c8:
5e:6e:9c:d2:b9:bc:e4:3d:a1:ec:11:8a:d2:d1:55:34:5c:7e:
ac:35:77:9f:8f:54:5d:e3:2c:2d:ec:26:d6:2b:33:af:a8:09:
2f:fb:2b:5a:ff:f3:e9:72:dc:5b:ce:a4:e5:14:1d:3a:52:d7:
b1:59:14:fc:59:be:2b:12:ec:44:6c:d7:e8:12:23:2d:df:af:
8a:56:01:a6:3f:48:70:9d:1e:5a:e4:1c:13:52:5d:a0:cd:77:
ee:27:e7:26:44:a2:d9:8f:8f:77:d7:67:9b:37:3e:7f:d0:db:
00:5f:c1:00:6f:7c:0a:7c:29:47:4a:b4:c1:24:ca:48:7f:83:
28:39:ae:3d:ed:14:e9:d4:9d:54:75:ac:c4:69:65:70:b4:2a:
2b:34:be:23:64:e4:17:7f:88:e1:0a:93:c3:c6:d6:24:8d:83:
b0:1c:0b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:12 2025 by rpki-client