Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File: qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier: OXXNpcHsoH1U/jBpaGbJzORtgQCd3y7oBPZKoM0IbKc=
Subject key identifier: 62:A4:02:7A:D5:7D:39:B2:BE:F9:69:2D:D4:73:7F:CF:48:C3:FE:F9
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer: /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial: 0194BCA9D87D7A8DFB1986319EF0505639B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number: 0950
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: LQO8Jka9B_Ga8wSNJ-H4GWRMbUM.roa (hash: 9Hoa1JZkYbMn9eEYjrKfJwUHw8DrzeOwQXlGIKyXqwo=)
2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: wIzx7CBfmtHte4aAM3BNDsWXwlOOfY5Ai2qi9mxhZuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:7d:7a:8d:fb:19:86:31:9e:f0:50:56:39:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=62a4027ad57d39b2bef9692dd4737fcf48c3fef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:a0:3d:eb:8c:ba:b7:9c:6f:8a:68:f3:07:
3f:99:2c:de:26:14:dd:21:09:36:ed:2f:d6:03:98:
ae:d5:5a:a5:5e:ae:24:3d:e2:b5:26:cc:af:3a:d3:
9b:f3:d2:7f:35:3e:be:64:cf:33:54:40:de:24:bb:
f9:32:50:79:63:54:3f:73:f0:e7:d3:37:98:46:c2:
ae:d5:3b:40:56:66:fb:b1:0e:02:a5:a3:b8:a1:56:
5a:fa:10:3b:e1:5e:10:83:83:89:de:5b:d4:4a:cc:
0f:13:b4:cd:c5:95:16:c4:04:51:60:37:05:91:7c:
f4:6a:76:c3:2c:7d:e4:5a:6c:8f:be:d1:24:c1:14:
00:2d:1a:18:a1:8b:5b:9b:75:6f:24:95:2e:6b:0e:
1e:d8:8f:8d:0f:90:cd:52:d0:f6:91:97:8b:69:ee:
9f:ca:ab:93:b0:fc:aa:af:a0:69:77:8a:0e:e9:45:
d7:32:58:80:20:e2:c3:20:ac:f6:cb:34:85:d4:14:
a2:95:18:ca:96:0c:46:bb:dc:1e:de:66:03:5f:dd:
ab:42:47:2e:35:95:ef:5e:31:fe:d8:09:5a:b1:c2:
23:e8:d5:fe:7a:5d:9e:a4:d5:a7:a0:33:fe:61:a1:
04:2f:5b:ad:61:9a:d1:24:71:14:9e:e3:33:32:da:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A4:02:7A:D5:7D:39:B2:BE:F9:69:2D:D4:73:7F:CF:48:C3:FE:F9
X509v3 Authority Key Identifier:
keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:35:e7:36:44:04:ec:d2:9e:73:b3:c1:94:5d:12:04:77:ee:
03:3b:b4:63:bf:4c:8d:44:e8:ac:52:6f:d7:80:d2:17:35:29:
24:85:1a:d8:fe:80:57:00:51:8f:4d:44:45:e1:3c:f3:8d:10:
7e:09:de:50:9e:41:19:d5:41:3e:20:91:5b:78:43:40:c3:58:
dd:c4:e4:6f:7e:8c:48:61:5a:be:97:34:bb:a2:35:81:33:2f:
07:55:35:a0:0e:44:80:7e:d9:1e:17:ed:0c:d8:97:5a:4d:ba:
6a:98:69:96:d6:58:22:be:4c:83:0b:cc:0d:52:02:f0:73:d8:
35:aa:b0:00:ad:71:e0:e6:1d:e0:b1:0a:74:12:05:8c:c7:44:
e2:f0:e6:b2:61:48:f4:40:7e:20:4f:4d:b7:fc:0c:c9:5e:03:
5c:c5:58:eb:68:27:0a:a1:7d:eb:97:8e:d3:de:18:61:94:cb:
89:d5:bb:2a:64:3d:5a:2a:ea:1d:b8:b1:08:d9:5c:24:96:81:
ed:57:a7:f5:d2:06:3c:98:1a:91:4b:bf:69:e1:b8:57:a4:73:
d7:97:bf:84:18:01:fe:64:42:df:40:dc:16:04:24:f2:cc:3c:
61:9c:d8:84:cd:2a:da:eb:2b:3f:b4:3a:3e:fb:2a:91:2f:92:
76:16:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client