Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: d/uQ53Xwp7GmLwk5jeYEmJ3h0Xg6U4uM+WT5+Pviy0g=
Subject key identifier: F7:75:52:D3:22:51:FC:C1:41:AF:B3:3E:69:A0:FA:68:23:7D:EA:2E
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 0194BCE0D69350DC14D067A5351F6C23889B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0326
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: EmT2mHv/w31imnSJ/y3GO/V9ONOyyLSslY/W9VAhRNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d6:93:50:dc:14:d0:67:a5:35:1f:6c:23:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=f77552d32251fcc141afb33e69a0fa68237dea2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:6c:1a:6c:ab:76:f0:88:16:5d:24:46:ea:
20:45:76:ca:33:30:0a:9e:35:cd:88:24:14:22:ee:
56:87:af:21:6d:96:db:ef:c3:76:0a:c1:3b:bf:c1:
c2:8f:b2:e9:de:6f:af:29:6a:0e:ec:70:73:fb:7c:
19:d1:e0:9e:e0:9a:cf:cc:d7:2e:dc:68:bb:a7:8c:
62:9a:68:ff:e4:04:da:1a:7b:df:96:7d:16:b7:fd:
fc:3b:02:27:f8:6f:5d:13:91:68:0d:91:98:3a:a0:
20:99:35:c1:76:6c:53:bf:35:a7:f1:65:f6:6e:1e:
9a:43:9d:9f:c9:aa:e3:c6:e9:ac:99:e3:5c:44:66:
ce:70:08:ea:0e:05:8a:58:3a:9b:5c:c1:f8:53:c8:
d5:cf:5d:19:0c:d3:9d:3f:a9:f6:e4:dd:6b:a9:de:
16:2d:92:e1:36:e0:e6:6b:a4:1f:d2:31:99:5d:75:
b5:38:2a:db:9d:fc:0e:ff:4e:e6:4b:57:51:f5:15:
2e:f9:75:0d:ed:1d:82:11:a7:f1:37:2b:bd:41:37:
5d:23:d6:31:3c:92:00:1c:df:49:7f:9f:b9:52:97:
39:a0:38:64:e0:50:3f:b1:db:c3:cb:e1:3c:63:86:
1b:f9:4e:e8:bc:b8:0b:33:2a:2e:a8:aa:55:41:2d:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:52:D3:22:51:FC:C1:41:AF:B3:3E:69:A0:FA:68:23:7D:EA:2E
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:fc:4f:13:a6:1e:be:6e:ed:f3:9d:da:44:26:74:69:76:
6b:e0:2a:43:21:cf:ca:1a:bf:96:7e:1f:e7:4c:48:e6:19:bc:
4e:89:2b:59:9c:8e:94:65:39:63:eb:e6:a2:5c:b1:ef:14:4a:
de:00:2d:09:f6:de:98:07:dc:d1:39:51:80:e0:43:5a:2d:9a:
52:b5:08:83:1e:31:78:52:26:f5:11:e4:27:ff:b1:56:8f:19:
b5:22:0b:c8:4f:52:82:af:83:e0:aa:4f:70:3a:4f:d1:56:fd:
6c:9f:db:d9:e0:96:b1:74:70:1a:ab:7b:91:18:4a:4b:60:6e:
02:92:c0:7d:e7:a9:a8:70:1f:45:3a:bb:a5:ac:8a:bd:c9:a3:
4a:e4:50:1b:14:02:9b:07:ae:af:12:8a:7d:af:b2:e9:52:db:
69:e2:58:eb:94:43:a0:48:ad:52:d3:14:a9:65:35:f2:a9:93:
ee:f9:8f:d4:1b:fc:cc:a3:87:5e:7a:e9:20:c4:1c:dd:ea:99:
8a:96:57:c2:0b:3c:5a:2d:96:1a:b3:58:ae:cf:5c:04:28:7e:
c6:fa:b2:21:5e:12:78:88:a9:c5:cb:c6:63:4e:81:a1:b0:c5:
12:f7:12:1c:fc:a1:39:8c:45:55:b5:db:52:55:cb:8d:d9:38:
1f:ec:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client