Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
File: quE1bmQEwLcC1bOBOpNENarsDJg.mft (raw, json)
Hash identifier: MDDR4sgMC1HiJOZT9ihwSjB8N2mlUlG/4Y+cy/vu7CQ=
Subject key identifier: 04:1B:0E:32:31:20:90:9E:82:A4:46:88:89:B6:98:99:64:9C:48:82
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Certificate issuer: /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial: 0194BBCE3D42145471576D62662EBD18C488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: BOBgwQPsKXUo9GzpTtJWLmuHKao.roa (hash: t31DUf3VuVsE55kZKdOM/CwyGRToQ0y9LdW//yyGoxE=)
2: quE1bmQEwLcC1bOBOpNENarsDJg.crl (hash: NX0yEV7tas9LUkP/gSsi1H0uT925pFDwQ2aps0B6aeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:42:14:54:71:57:6d:62:66:2e:bd:18:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=041b0e323120909e82a4468889b69899649c4882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:bf:14:bd:20:5d:6e:a3:3f:eb:20:bb:2f:
5f:6d:1d:96:1d:aa:85:e9:5b:21:64:62:0a:c3:f3:
b9:c0:57:7b:be:61:2f:0b:a1:a4:9d:59:d6:ce:38:
26:0b:17:77:dd:24:fc:2c:bd:6b:f8:9d:97:b3:27:
10:fb:8e:75:d4:7e:1c:23:9f:5b:46:c3:01:e2:7f:
7e:34:7c:5a:3b:52:bf:8b:3b:6a:a4:79:2e:cd:5d:
ff:5e:b7:9e:a9:fd:c7:a9:ab:05:b9:ab:62:5c:a4:
ff:a1:0b:cc:fb:4d:a0:ab:f2:2a:15:60:eb:11:4b:
76:07:63:9d:bf:c3:85:be:8c:26:18:86:0a:37:2d:
5f:e5:7c:72:de:80:c9:42:36:44:3b:bc:32:3f:b7:
f6:f4:e8:6a:1f:0a:0a:4f:af:d1:13:fb:5e:30:2c:
e3:f7:31:5c:4e:a8:fa:0c:fb:6c:9f:dc:8b:46:63:
12:87:af:ea:96:16:dc:bb:6d:e4:dc:2d:1f:0f:6c:
ed:5b:16:b0:50:f6:57:ba:69:77:67:bb:3c:83:e8:
2d:ef:84:e0:11:4d:a3:d3:4f:d4:ab:1d:44:84:00:
fa:38:f4:71:9c:a8:5d:23:35:ea:1f:07:06:39:ba:
54:f2:7c:b8:a6:5c:37:a4:ca:74:97:12:c0:84:93:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:0E:32:31:20:90:9E:82:A4:46:88:89:B6:98:99:64:9C:48:82
X509v3 Authority Key Identifier:
keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:3e:4b:cc:8c:b8:b4:f5:d3:b4:1d:25:4c:c2:ea:b2:f5:
25:05:c0:07:9c:9a:3a:8c:d0:6c:9d:9f:02:07:84:35:58:67:
e5:09:e1:f9:79:11:69:58:a1:b9:67:13:94:d2:46:c8:db:a6:
c4:ae:d9:6d:cd:af:e1:5c:22:47:cc:11:59:b8:b3:47:e3:46:
54:66:35:07:29:3c:2f:df:da:16:e8:6c:2d:4e:89:cf:f0:5a:
e3:a1:92:eb:3d:61:e5:92:e9:82:1f:66:9b:c0:aa:80:42:77:
a7:c4:d0:ea:cc:b8:9e:2a:a3:a2:81:8f:03:e9:ec:48:0f:51:
d2:37:9b:be:9f:b4:dd:73:f4:56:1a:ea:b2:ee:98:f0:14:7d:
bc:4d:98:6f:e7:d5:b0:d5:82:2d:45:e0:76:aa:67:91:05:99:
d9:02:48:56:f6:5c:7f:29:2c:6e:25:0c:95:dc:ab:67:9f:f6:
78:5a:d9:e1:ce:06:4f:da:7c:88:76:c5:17:4a:9e:24:4a:b6:
f5:db:10:17:ad:78:ea:ed:16:06:bc:7a:77:6b:01:61:a9:00:
bc:28:cd:e1:33:c2:c3:95:57:3c:74:32:ec:1b:a3:3b:18:9b:
78:da:59:3e:fe:b5:25:7c:7a:2e:87:f0:fd:8e:5c:30:75:72:
a3:bc:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client