Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
File: quE1bmQEwLcC1bOBOpNENarsDJg.mft (raw, json)
Hash identifier: ATWsxDHjl94YM0Rgin3o+4EOTMH8xQdZU3AL7YN5tl4=
Subject key identifier: 19:24:FB:BD:D6:0C:DE:98:34:19:CA:AE:94:89:A8:3C:7E:8D:C8:2C
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Certificate issuer: /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial: 01951692850F3FBE4EC04F715B241B093FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
Manifest number: 145A
Signing time: Tue 18 Feb 2025 01:00:55 +0000
Manifest this update: Tue 18 Feb 2025 01:00:55 +0000
Manifest next update: Wed 19 Feb 2025 01:00:55 +0000
Files and hashes: 1: BOBgwQPsKXUo9GzpTtJWLmuHKao.roa (hash: t31DUf3VuVsE55kZKdOM/CwyGRToQ0y9LdW//yyGoxE=)
2: quE1bmQEwLcC1bOBOpNENarsDJg.crl (hash: y4utafuJVKICogkiGJEy5lA1DNB4AwGI/TMXovzfouo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:16:92:85:0f:3f:be:4e:c0:4f:71:5b:24:1b:09:3f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Validity
Not Before: Feb 18 01:00:55 2025 GMT
Not After : Feb 19 01:00:55 2025 GMT
Subject: CN=1924fbbdd60cde983419caae9489a83c7e8dc82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:8b:29:74:d6:7e:c1:a8:06:d4:1a:f3:bf:
6f:64:40:5a:ea:08:ca:22:21:bb:ea:14:1b:a0:0a:
15:dd:80:1f:a4:7e:0c:e1:45:69:4d:8d:dd:b4:10:
39:b5:5c:19:f5:c2:bb:6f:80:59:6b:14:ea:ed:90:
40:8a:8c:a3:59:c5:60:4b:c7:03:e6:21:b5:e7:95:
17:25:2f:45:64:fa:6f:b1:4a:65:b4:ab:80:d4:d5:
d0:16:18:ed:01:86:b8:00:b4:39:c2:df:a9:76:af:
8c:48:8a:3a:71:20:17:4d:5b:ec:1c:17:d8:10:cf:
b4:45:23:b7:e4:e1:74:d6:d4:7f:94:ce:d5:db:1f:
cc:42:96:ad:76:45:48:fd:6a:5c:02:65:9e:87:65:
de:dc:37:9a:c3:11:ad:64:53:be:0b:04:4d:1d:fb:
d1:d3:6a:df:26:4d:64:4f:7c:88:b9:a6:57:d2:bf:
1e:1d:f0:1b:04:5d:43:fc:e1:e7:2b:58:7d:3d:1f:
f1:23:f6:9b:19:a3:07:c3:8e:60:5f:8a:ef:e6:5c:
13:af:d4:74:3a:75:b8:77:f8:16:15:49:fc:a8:03:
cb:c2:f9:97:ca:e7:5f:4f:34:71:f7:14:19:78:f2:
25:36:c4:22:f9:87:e4:4d:1e:4d:28:c6:0b:6b:04:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:24:FB:BD:D6:0C:DE:98:34:19:CA:AE:94:89:A8:3C:7E:8D:C8:2C
X509v3 Authority Key Identifier:
keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:64:74:95:df:2b:50:4f:cd:65:5e:32:f4:72:66:12:73:29:
e3:b7:32:6a:4c:84:cd:b8:4b:20:4d:1e:6b:52:65:02:23:70:
31:a2:e2:ed:37:08:21:78:9a:1b:71:01:ca:27:21:bc:65:72:
de:d7:fc:c3:67:d4:39:64:f2:9b:e9:06:a1:c2:22:96:d1:2e:
0e:f3:f6:05:ad:aa:b6:83:66:23:b4:0f:d2:48:47:29:9e:2d:
e7:b6:c0:ce:e9:5e:f1:f9:af:18:1f:72:9e:a5:a6:33:92:64:
66:c1:3c:72:e8:74:63:d2:74:4e:a3:a9:47:90:1e:3c:e0:77:
4f:30:8e:56:85:07:b0:9c:23:4a:b0:8e:78:ff:f6:ed:d0:13:
43:d4:46:e9:fc:64:7c:f6:bb:ad:da:d7:f8:92:8a:0c:ee:44:
47:09:25:5b:44:84:36:7d:78:3e:65:f9:0d:9a:f9:60:5e:63:
1d:c1:ba:50:ef:88:80:31:ac:66:53:88:e6:1e:90:5d:6f:6a:
d3:8f:6b:f2:49:f5:31:4a:36:f1:b1:06:a7:5e:90:94:d4:f7:
b4:44:14:50:c8:1f:db:0b:2f:5a:fe:d3:a0:08:9a:e9:09:18:
3f:db:68:5e:e5:06:91:02:5f:d1:ae:59:d5:49:fb:6b:49:59:
69:fe:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:49 2025 by rpki-client