Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft
File: 2qnMSPdVJW71JU-6HRuftrr_kaA.mft (raw, json)
Hash identifier: qCpALk33bgRl0DfsO/rvlN4oNTMq94eoxNuZaZ78+s0=
Subject key identifier: 00:B1:D7:E3:6D:CA:35:B3:E5:EE:47:DD:D5:74:C1:36:5E:4D:3E:C0
Authority key identifier: DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0
Certificate issuer: /CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
Certificate serial: 018E5AA9FB0424C349F4E992363E4E578EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft
Manifest number: 02FE
Signing time: Wed 20 Mar 2024 07:01:12 +0000
Manifest this update: Wed 20 Mar 2024 07:01:12 +0000
Manifest next update: Thu 21 Mar 2024 07:01:12 +0000
Files and hashes: 1: 2qnMSPdVJW71JU-6HRuftrr_kaA.crl (hash: kfXob6AE52VHgHlye9SCyD4L3fo/aYZHVA5Uo5Pc/vQ=)
2: y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa (hash: bNcrkainz5RHeXvJqBbYP2TxUyzDrQiRicAqavxrCCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:a9:fb:04:24:c3:49:f4:e9:92:36:3e:4e:57:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
Validity
Not Before: Mar 20 07:01:12 2024 GMT
Not After : Mar 21 07:01:12 2024 GMT
Subject: CN=00b1d7e36dca35b3e5ee47ddd574c1365e4d3ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:53:a9:b1:00:9c:21:ae:26:89:90:dc:d7:
4c:a5:2b:4e:a5:45:49:90:10:5c:9b:78:f3:a9:47:
10:03:e1:cb:7d:0f:87:4d:06:9f:7f:0b:f9:d6:97:
05:77:8b:c1:6e:6b:f9:97:25:77:ca:8d:7b:20:b6:
bb:3c:5c:c1:43:7d:f9:8d:5a:6b:6e:46:7a:ee:75:
3e:ff:01:25:39:34:54:77:8e:a6:b5:80:7c:ff:e4:
ef:20:63:28:49:84:e5:74:4d:00:77:ec:ef:be:d8:
41:50:d8:10:56:ce:7b:5b:f4:b5:9c:0b:f7:c4:39:
8a:31:2b:56:8d:a5:81:e5:f7:88:9d:ec:1b:ea:0b:
b3:ec:d4:db:20:83:78:19:b8:de:75:50:d8:b1:c2:
ed:bf:56:d2:2d:fe:1b:35:b9:32:00:74:6c:9a:f0:
6a:f2:f4:95:da:91:7f:4e:c3:99:76:df:fd:1e:5d:
50:d0:2c:63:7a:59:f7:a5:f0:a2:f0:04:28:bc:a7:
93:d0:ff:ce:00:0e:0d:51:e7:df:35:fb:8a:d0:fa:
bc:20:77:e3:fc:fe:fc:d7:32:f0:83:3a:df:af:92:
21:0e:41:8a:bb:e7:c5:c2:8d:d1:23:e7:1b:04:f8:
55:38:43:06:2e:e2:75:de:d1:03:c7:02:d9:21:3a:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:D7:E3:6D:CA:35:B3:E5:EE:47:DD:D5:74:C1:36:5E:4D:3E:C0
X509v3 Authority Key Identifier:
keyid:DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:25:83:68:a4:7a:c0:3f:82:f2:33:8c:08:6a:4a:4d:d6:
bf:2e:4e:3d:48:1c:03:1b:11:01:2e:d0:92:74:a2:4b:c9:04:
f4:e7:fb:53:63:bb:5d:c3:fa:ac:36:f4:1b:6a:65:52:9f:ab:
ce:f4:a6:cf:10:23:4e:eb:74:38:73:9f:8f:d5:d5:9f:33:e9:
e5:dd:40:1a:e8:48:b3:49:a8:61:f3:17:8c:b1:cb:ee:c8:a9:
a4:f6:7b:3b:65:9b:e5:6a:38:bd:75:9b:6e:69:98:a7:d3:6a:
c0:7d:af:d3:17:1f:9e:ee:a9:f7:19:d2:15:59:15:35:74:96:
3c:69:e5:54:ff:cd:e0:6a:1c:e4:c1:b5:3f:17:a1:ab:d0:ee:
7e:9a:6d:7a:30:3d:6c:c4:7e:48:6b:c7:82:77:05:2e:6c:57:
ad:a1:ad:49:62:d4:cb:7f:7f:91:dd:1a:1e:92:ca:84:a5:1b:
68:bf:a7:6c:de:40:51:15:72:4b:8f:1a:fd:70:5e:cb:cd:19:
d6:ca:db:63:15:04:fb:e3:97:a5:bb:41:7f:9b:ba:d5:00:c6:
7f:41:e0:32:6e:d8:33:8e:3e:be:1e:9e:a5:eb:52:11:7e:57:
5e:68:5d:87:a0:04:d3:e3:e2:fd:1c:b6:7f:57:ff:f1:36:c3:
6c:01:52:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5aqfsEJMNJ9OmSNj5OV47oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTljYzQ4Zjc1NTI1NmVmNTI1NGZiYTFkMWI5ZmI2YmFm
ZjkxYTAwHhcNMjQwMzIwMDcwMTEyWhcNMjQwMzIxMDcwMTEyWjAzMTEwLwYDVQQD
EygwMGIxZDdlMzZkY2EzNWIzZTVlZTQ3ZGRkNTc0YzEzNjVlNGQzZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAletTqbEAnCGuJomQ3NdMpStOpUVJ
kBBcm3jzqUcQA+HLfQ+HTQaffwv51pcFd4vBbmv5lyV3yo17ILa7PFzBQ335jVpr
bkZ67nU+/wElOTRUd46mtYB8/+TvIGMoSYTldE0Ad+zvvthBUNgQVs57W/S1nAv3
xDmKMStWjaWB5feInewb6guz7NTbIIN4GbjedVDYscLtv1bSLf4bNbkyAHRsmvBq
8vSV2pF/TsOZdt/9Hl1Q0Cxjeln3pfCi8AQovKeT0P/OAA4NUeffNfuK0Pq8IHfj
/P781zLwgzrfr5IhDkGKu+fFwo3RI+cbBPhVOEMGLuJ13tEDxwLZITrCTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACx1+NtyjWz5e5H3dV0wTZeTT7AMB8GA1UdIwQY
MBaAFNqpzEj3VSVu9SVPuh0bn7a6/5GgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2Qt
OGUwNDQwM2EzMjVhLzEvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2QtOGUwNDQwM2EzMjVh
LzEvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXElg2ik
esA/gvIzjAhqSk3Wvy5OPUgcAxsRAS7QknSiS8kE9Of7U2O7XcP6rDb0G2plUp+r
zvSmzxAjTut0OHOfj9XVnzPp5d1AGuhIs0moYfMXjLHL7sippPZ7O2Wb5Wo4vXWb
bmmYp9NqwH2v0xcfnu6p9xnSFVkVNXSWPGnlVP/N4Goc5MG1Pxehq9DufpptejA9
bMR+SGvHgncFLmxXraGtSWLUy39/kd0aHpLKhKUbaL+nbN5AURVyS48a/XBey80Z
1srbYxUE++OXpbtBf5u61QDGf0HgMm7YM44+vh6epetSEX5XXmhdh6AE0+Pi/Ry2
f1f/8TbDbAFSgw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:29 2025 by rpki-client