Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: aEU1sLhcjcN8GbOyixbnXE6kMS2zj5D0TfqVsF45uO0=
Subject key identifier: FA:7F:8A:28:89:AA:81:71:BC:63:2B:9E:F6:58:87:64:3B:D2:E4:81
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 0194BC04C4E082FF578C7DAFBC7B456B4822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: GqhyLXsh3fadS5Kz154caj22zEz0RxljHdKoxuGKfGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c4:e0:82:ff:57:8c:7d:af:bc:7b:45:6b:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=fa7f8a2889aa8171bc632b9ef65887643bd2e481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:6f:2f:22:f2:13:66:a0:44:cd:0e:41:a1:
d1:84:8c:99:0a:9a:6a:e3:06:21:9e:e2:fd:44:31:
95:c9:6c:d8:b8:3c:3d:43:91:9c:fd:80:d5:97:a6:
18:1e:d9:69:20:41:32:69:94:ba:f5:85:d9:f8:bc:
6e:13:b6:b8:56:41:af:a3:49:d8:e6:53:ae:8c:5b:
ad:22:a5:bf:e8:5f:b6:f2:1b:48:3f:c4:58:41:1c:
22:94:6d:b0:d0:1f:1f:c8:f0:05:3b:d9:b6:b7:4c:
b5:3d:fb:d3:a7:7c:8f:7a:a8:c1:f6:1a:06:de:bc:
74:b2:8c:17:7c:ed:a4:e9:1d:ce:89:1c:2d:91:2d:
b9:5f:00:a0:56:70:e9:5b:10:b8:ec:79:1a:05:9a:
ca:c8:74:76:d0:66:82:d8:6a:3c:4c:d8:f0:dd:b0:
63:5c:f6:b9:47:18:e4:9e:7f:ad:f6:e7:6d:9d:91:
4c:c6:af:ff:ac:ac:bb:23:24:80:8a:28:37:f3:44:
3a:26:0a:f4:ad:19:54:bc:f9:70:89:8f:28:4c:e5:
ed:46:4d:a0:b2:5f:93:ce:53:3e:cf:83:55:b8:cc:
4a:b2:76:8b:f4:a9:ff:92:29:14:14:4d:a6:94:63:
09:a3:40:23:a1:c6:37:a2:9c:b1:54:e3:65:57:e4:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:8A:28:89:AA:81:71:BC:63:2B:9E:F6:58:87:64:3B:D2:E4:81
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:02:06:68:47:ad:31:19:f3:51:3c:37:37:8f:a0:13:3e:
73:4e:d9:d7:0a:d8:68:d8:8b:32:46:84:5b:41:08:5b:b7:ab:
8d:c6:19:0c:a5:ae:04:ac:ad:24:ea:25:44:a1:e9:5f:20:c4:
c3:a8:7e:e3:1c:63:25:1f:cc:93:98:39:b5:0c:a1:cd:54:d2:
74:7b:1a:da:39:c0:95:bc:35:62:90:76:85:2f:d9:8d:b0:70:
9a:81:d9:70:65:20:41:ca:82:53:9b:bb:32:08:55:93:0a:1c:
86:e8:5d:c0:b0:0b:72:1f:2f:d5:3c:51:c4:b9:1a:30:d0:c7:
db:c5:9d:65:8d:a8:bc:5b:4b:cc:c4:db:16:a1:ce:94:c4:49:
95:56:2a:a4:d5:83:d9:67:0d:af:b2:b2:4d:12:3c:d3:0f:bf:
58:19:43:fd:4c:ab:ab:4f:20:a6:63:53:52:20:72:da:7d:bc:
58:29:af:9d:4a:c0:66:cb:68:3e:57:85:fb:ac:18:aa:ea:87:
95:fa:1a:00:24:9c:90:61:3e:72:f3:5d:69:1f:87:1d:d7:cc:
6b:ab:f7:69:63:73:d7:0c:45:74:d2:24:34:0f:6f:54:46:e6:
dd:ee:7b:58:a1:23:63:23:8e:cf:e3:27:31:76:23:24:e5:d9:
d2:c9:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:21 2025 by rpki-client