Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: apOMdbXrOAqyUc40vAbXIbyWyCcbJCau0C0oLlgQY8I=
Subject key identifier: 22:26:4C:69:94:E0:D9:FC:F1:D0:F4:BA:F3:E0:8B:2B:8E:2D:14:1F
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 0194BD85656FA6A7ABA7685EC13E05A36284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 1AGbFP/KF0ePdQP+hNPz2axSU/TZE3DUgZWAgKrbWoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:6f:a6:a7:ab:a7:68:5e:c1:3e:05:a3:62:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=22264c6994e0d9fcf1d0f4baf3e08b2b8e2d141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:35:11:b6:3e:c5:65:b1:62:9a:a4:96:f7:
0d:3e:43:f0:ce:e0:b9:44:6b:31:73:3a:d1:f8:45:
18:93:26:88:f9:a4:c1:e3:f8:dc:79:2b:f5:07:0c:
b2:32:ee:96:42:4e:2a:55:d7:ff:bd:22:19:cf:5d:
e3:c4:63:d1:20:b2:33:f9:ae:d3:f7:02:9c:ff:cf:
c6:9c:92:9b:a7:5b:2d:7f:81:38:79:1c:f8:8a:00:
30:09:4f:cf:32:1b:9f:b0:60:3e:97:ee:3a:fd:17:
65:94:d8:7f:5e:25:7b:dc:55:e4:e8:d9:ec:c0:ab:
dd:6f:11:9c:a3:4f:75:f4:aa:2a:9b:5f:7c:02:ba:
49:69:c1:bd:8f:b0:1b:e2:de:00:a0:14:38:4b:89:
19:d2:ee:25:96:d1:e4:e0:87:b9:21:17:23:3b:c0:
b4:29:16:23:19:5b:83:4c:6b:97:6c:f8:21:a0:06:
69:97:55:f1:b0:82:b6:bd:5c:d0:32:32:33:74:0c:
aa:0c:2c:b1:46:72:45:37:52:51:1d:43:42:87:9e:
c7:bf:29:e0:ee:be:a7:83:3a:22:9a:28:29:33:a6:
fa:11:d6:b1:22:1d:a3:3c:ab:cb:07:42:f7:b6:f2:
6a:b7:87:3b:8a:fd:0b:b2:52:a5:89:db:da:e1:ae:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:4C:69:94:E0:D9:FC:F1:D0:F4:BA:F3:E0:8B:2B:8E:2D:14:1F
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:0c:6d:26:6f:50:ae:5a:59:36:57:41:75:ca:50:c6:c2:
8d:3d:53:eb:d5:74:57:6c:72:2e:9c:a5:4b:8f:ba:56:32:90:
4e:f5:07:b8:30:92:93:b6:65:89:88:a1:e7:30:75:b2:b0:5c:
0c:ad:a5:d1:96:01:d5:ec:f7:29:29:a8:4a:57:95:c1:22:38:
08:55:b2:28:1c:10:a8:17:a6:f9:60:bd:0e:6d:82:bd:37:85:
24:5f:6b:2d:f0:4a:56:56:e9:de:9a:5b:dd:00:06:e1:42:40:
62:74:6b:3e:f7:0b:6d:f9:96:f6:c6:7c:a2:3e:c8:36:3d:8a:
b8:c1:f0:d3:73:bf:6c:6c:9f:b5:ca:ec:bb:f7:c9:d4:b6:9a:
a4:7f:42:6c:c7:4f:33:2e:e0:c1:21:9e:66:d0:18:33:a9:a2:
af:e2:27:53:f6:57:ba:24:2e:90:1b:a2:b4:a5:7f:2f:87:98:
7d:20:85:09:27:d4:af:67:9e:92:66:c2:99:da:33:ad:f5:a9:
ed:70:ba:1c:1f:b0:1b:82:03:96:07:4d:24:aa:12:b5:ca:39:
50:13:f3:31:d8:4c:fd:9f:cb:a7:3e:42:07:ca:8a:b9:65:1b:
80:ae:27:b2:76:41:ea:1d:e6:0a:c3:21:10:2a:6f:fe:c1:26:
99:fe:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client