Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: cGiKGM/1yUl888UsePcz4Q2OvSCisBlezHt1pYqt0GQ=
Subject key identifier: 00:BA:71:61:A6:A6:4E:EE:64:15:D2:67:A9:30:1D:04:46:8E:DF:B9
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0194BCAA008503767FB5F5418FA6FDB84BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0425
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: DkPQzjrCnqMpbEyjJU3+WFAL1J2WdMRYTbl5i4Eucc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:00:85:03:76:7f:b5:f5:41:8f:a6:fd:b8:4b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=00ba7161a6a64eee6415d267a9301d04468edfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:db:87:eb:2c:e9:56:f8:9f:58:8f:83:ec:
bd:fb:8f:0a:af:65:cc:37:fe:30:31:0a:8c:1a:71:
90:21:4a:20:f0:82:8d:84:6f:39:a5:ef:79:1e:b8:
ef:6a:ce:3e:83:a8:33:c3:7e:53:02:ef:af:e6:f0:
38:bd:48:54:b0:69:5c:c4:07:d0:40:29:ba:e5:8e:
f1:b2:2d:94:6d:2a:34:4b:85:9f:14:ca:02:14:5b:
3f:d5:ab:76:3e:66:f6:50:57:fc:43:20:05:3e:79:
de:5f:57:af:53:4d:3d:fd:1b:22:db:79:bf:55:00:
34:b8:5d:1d:db:4a:c7:f0:d1:81:cb:89:1d:ff:cc:
ab:62:80:b3:bb:04:12:e0:63:46:67:40:1c:72:05:
77:0d:ef:7d:3b:15:21:ff:d7:58:e5:e9:af:1a:0d:
33:e8:df:e8:59:3b:40:4e:77:d8:f7:7e:22:c8:1f:
76:54:6f:56:23:9b:e8:8f:0f:7e:ec:ef:6b:0e:ee:
67:6d:1c:b8:c1:31:9c:8c:59:15:90:14:98:9a:9b:
9a:10:0a:8b:d6:07:91:06:cc:da:aa:29:a0:c6:e2:
8a:36:ad:d4:63:12:b0:34:3b:ee:3f:22:8d:ce:7e:
4b:be:9c:15:3f:b6:2b:f0:fe:7a:15:da:09:da:47:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:71:61:A6:A6:4E:EE:64:15:D2:67:A9:30:1D:04:46:8E:DF:B9
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:87:61:a9:58:0f:66:66:bd:6a:a3:53:d1:3b:ba:a2:61:
75:66:4f:78:b1:85:0b:ba:93:b6:c2:9d:56:ec:28:4b:34:b4:
1f:d0:cd:6a:bb:95:19:b9:7d:e4:6b:a0:ef:79:d1:06:ec:59:
55:1f:7e:31:ca:d4:6d:d0:d1:4f:f6:4a:06:e7:ff:71:67:7f:
f9:9c:e2:36:ed:94:ee:c9:0f:1f:83:98:58:70:2e:f1:54:f6:
3c:2d:df:a4:56:70:a5:ce:44:86:9d:e3:ea:ab:7e:a1:00:c7:
4f:35:4a:22:31:b3:68:28:55:35:10:f3:4a:31:e4:c0:77:1d:
f0:f2:3b:2a:0d:14:3e:44:3d:65:6b:95:0f:9f:50:d6:94:6b:
02:52:3e:62:10:26:fc:9e:c4:49:56:a8:74:6d:d9:e7:7f:d2:
fa:e9:f0:d0:04:f5:92:f1:5f:ce:8a:a0:40:ab:cc:57:a4:10:
2d:6a:03:32:7e:11:42:88:13:50:af:e1:ac:6c:2f:ad:6a:98:
67:cb:2c:18:4e:50:bb:75:b7:fa:2f:99:ef:27:2d:04:1e:bf:
0f:fe:47:89:a3:ef:b5:05:1d:ec:ac:2c:da:21:60:f1:c5:91:
7b:ce:7c:fa:fa:b5:fc:be:65:a0:5a:88:47:c5:72:c1:68:e4:
2b:46:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client