Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: dP59VTs6RI+JVIesjq/hWVDSkLyduLRcvkrI4f8bKKU=
Subject key identifier: CD:FD:60:F3:EE:CC:23:78:45:65:03:03:09:FF:01:A1:91:91:BB:0C
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 0194BD4EBB63547637E68DFF9A1A2C989EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0A07
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: 1cJNiEGYo8Z7erP6ZzR6JEj3uej9BKwnqaZgQGYj5x0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:63:54:76:37:e6:8d:ff:9a:1a:2c:98:9e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=cdfd60f3eecc23784565030309ff01a19191bb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:49:cf:26:91:ba:45:32:d1:86:59:b9:c7:
b9:d3:6b:c3:aa:44:1c:40:92:c4:81:f4:71:7a:dd:
60:18:09:5f:a2:ac:15:16:20:80:6c:25:e5:3c:e8:
e3:15:16:5f:6c:aa:00:9f:2a:95:ab:ab:84:10:df:
00:d4:4b:16:05:5e:c3:25:90:92:98:95:e2:be:f7:
b0:50:fd:80:61:0b:5e:6b:dc:74:8e:00:1f:2c:95:
9c:0f:a2:8a:20:e7:6d:7c:fc:20:99:a3:e2:37:e8:
8b:a0:1f:38:36:fe:a8:30:ba:ab:a5:39:d1:a4:ae:
d1:73:9c:fd:42:cc:71:04:80:91:6c:4d:41:49:98:
e4:9a:e5:77:70:2d:0f:e0:54:14:a1:90:12:cd:b9:
97:7a:e4:28:b1:81:e6:87:09:f0:f9:9f:12:b8:96:
47:05:f7:22:47:89:fa:e8:7f:f6:6c:e9:45:f9:cd:
b5:ca:17:8c:d3:84:3d:ab:fa:46:c2:64:fa:b6:c0:
c4:ae:d5:1f:19:f4:44:df:01:7c:71:1d:fb:0e:21:
34:1c:11:8e:ae:88:3c:9c:b5:34:fc:3b:5a:46:d0:
23:07:08:cf:75:47:ef:ec:c1:f2:fa:54:bc:f8:e9:
d6:1a:8c:e0:06:0f:8f:1c:10:2c:25:75:02:07:d4:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:60:F3:EE:CC:23:78:45:65:03:03:09:FF:01:A1:91:91:BB:0C
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d5:d4:39:66:5f:81:bb:2d:2f:a4:6d:50:a3:b9:99:ac:b3:
4b:ab:5e:7c:ec:c4:e8:a3:c9:4d:21:93:39:a1:b9:9c:82:49:
2f:be:8f:bc:1b:37:5c:9b:97:a0:66:a6:44:f9:cc:b2:9a:1f:
56:85:37:b8:3e:0e:69:97:6d:31:64:ef:a5:71:d0:f1:23:84:
a6:a5:56:73:8c:28:93:22:02:14:42:e2:e6:0e:52:e9:64:45:
ba:14:d2:fb:90:df:b8:eb:f4:2c:72:7b:cc:3a:ac:61:73:2f:
84:09:5c:ab:fa:79:d3:a1:9d:b1:26:70:05:f4:a2:3d:ee:e8:
e1:39:12:92:36:12:62:e9:1e:4a:9b:e6:13:39:ec:65:1f:c4:
b8:97:dd:5a:66:d7:74:13:63:de:26:b9:ef:b7:eb:7f:5c:0f:
c8:7f:42:99:42:79:da:d1:c9:d8:e9:f4:7a:d7:4b:49:8d:e9:
db:ac:18:17:a8:a0:8a:bb:30:ce:ef:35:03:69:32:af:00:ed:
3f:ef:df:63:01:21:8b:3b:ed:60:93:8e:c3:a6:f7:3e:6d:17:
c2:2f:a4:b5:74:3b:ed:d3:6b:21:ed:da:2a:c2:e7:ae:f7:df:
c2:00:37:80:d3:a9:55:ce:f3:4c:0c:ac:dd:f4:c2:10:20:0d:
6e:f7:f6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:23 2025 by rpki-client