Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
File: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft (raw, json)
Hash identifier: 2WoEG6y26U4j2M0ZVmBTwr6iWerDTs70ApJEoCkLxV0=
Subject key identifier: FE:33:8D:4F:5F:88:F5:C2:E6:77:B6:16:84:30:97:8E:9B:CC:81:92
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 01948F99E2F4F08779B058D56F4CD7E3F758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
Manifest number: 12E9
Signing time: Wed 22 Jan 2025 20:00:14 +0000
Manifest this update: Wed 22 Jan 2025 20:00:14 +0000
Manifest next update: Thu 23 Jan 2025 20:00:14 +0000
Files and hashes: 1: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl (hash: ALSTHcmbPxnl+DUB9Cj+A4Vxme3FV6KH+zRPk7Xh734=)
2: VlUkqVXq4pD8DdrYNzGnohL2rdE.roa (hash: RuqQ0nh3v1UQiJ2f6wvRYsbJ1jvcXoe87w6A65XCHcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:99:e2:f4:f0:87:79:b0:58:d5:6f:4c:d7:e3:f7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Jan 22 20:00:14 2025 GMT
Not After : Jan 23 20:00:14 2025 GMT
Subject: CN=fe338d4f5f88f5c2e677b6168430978e9bcc8192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:c6:1e:fe:10:80:34:f5:06:7a:68:d7:72:
e0:00:11:c7:cb:20:ad:38:ae:7f:b8:36:ae:0f:c8:
8e:d3:6b:53:24:0c:0c:3d:22:de:0e:50:0b:1e:c5:
c3:82:f2:6d:d9:f3:9a:05:98:91:b6:5e:b0:bb:84:
b7:78:eb:3d:6a:3d:9b:45:8e:b1:8a:3f:f2:f4:75:
1c:66:bb:fa:c5:94:8c:e4:cd:20:aa:30:df:0c:66:
8a:13:ce:e5:82:69:54:11:52:2c:49:3d:c9:d9:30:
e4:b8:fb:a5:6c:33:4d:d8:3e:54:f0:07:bd:e9:56:
62:86:03:a2:2c:a1:ff:1a:65:d9:98:e3:9e:20:70:
43:1e:09:16:9f:59:64:62:60:94:cf:8e:7a:5d:b0:
5a:50:65:25:1f:a1:81:12:b5:82:a1:46:b6:79:0b:
b5:6a:6d:2c:71:a6:73:4a:89:e0:4f:83:c2:5b:e6:
50:97:ab:ed:dc:1a:bf:85:ca:65:ea:ed:f2:57:ec:
20:ef:ed:9f:5b:90:26:07:67:8c:46:f6:9c:e1:a3:
62:44:99:f4:38:13:57:02:21:bb:e6:3a:1b:03:fb:
8c:f6:81:ec:d0:0c:df:bc:7b:f8:5f:f1:73:88:5f:
6e:10:eb:56:98:85:d3:47:80:f9:83:d1:f0:15:f9:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:8D:4F:5F:88:F5:C2:E6:77:B6:16:84:30:97:8E:9B:CC:81:92
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:24:71:ff:53:d7:69:b4:b9:57:85:95:66:b4:e9:c8:ba:df:
6d:f1:01:23:7b:c6:42:d0:67:e0:60:93:3f:01:51:99:3c:b2:
40:ef:ff:7d:02:fa:9b:24:61:67:56:2b:0b:fe:4f:c6:33:cd:
cb:d6:4f:f7:00:87:30:9f:d9:26:6e:b2:69:da:4f:95:6e:a4:
1e:fc:dc:62:a4:27:5c:20:4c:10:e2:bd:34:c5:15:35:77:1a:
fd:f8:16:8c:68:64:ce:fb:67:a4:8d:2f:35:f6:78:a7:5d:26:
0f:df:11:38:18:7a:03:0f:79:7b:60:19:42:10:ae:71:70:6b:
a0:ee:90:52:fc:d4:dd:33:aa:27:2a:ea:19:b6:37:51:15:49:
0a:cf:f2:1b:43:d1:ff:d1:64:71:b1:73:84:28:3d:7d:fd:8c:
06:f3:ca:ef:b8:28:14:7e:31:a9:7b:d8:80:3e:10:4c:30:f6:
fa:19:e6:41:49:99:10:55:a1:02:89:a2:9b:f4:b9:5a:20:0a:
91:32:43:b3:1f:13:5d:7a:c5:6e:a9:69:f7:b9:7d:ab:b8:77:
87:46:e4:72:2c:01:11:63:47:0f:27:d6:cf:d9:48:d7:8f:bc:
3b:88:80:27:59:b9:11:ed:b9:67:8f:bc:6d:0b:93:a6:9e:e3:
61:54:e7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:00 2025 by rpki-client on console.sobornost.net