Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
File: q53IX5TKZH3g22TXTTE5lHzESbo.mft (raw, json)
Hash identifier: BCf0Vg1ymNsbpcSWbF1RvqgTQy0zd/f3zCA/mv7AM+E=
Subject key identifier: B3:03:13:E9:03:08:F5:48:68:61:1E:21:F0:BA:9D:22:D9:EF:7C:11
Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Certificate issuer: /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Certificate serial: 0194BC3C5C2129C757C65D4D071EA43B7B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
Manifest number: 1117
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 3U4MivbAgZFFTzpri9v9qzr-9Dg.roa (hash: OpxoqQJPTPV/7nPesTeS09o0jfmFmQcqEJLqODzVTIM=)
2: q53IX5TKZH3g22TXTTE5lHzESbo.crl (hash: Jr/B6bXlfxmhGOqQfeaz5I7iayWuqgJZRyL1Uddc0OM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:21:29:c7:57:c6:5d:4d:07:1e:a4:3b:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=b30313e90308f54868611e21f0ba9d22d9ef7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:bc:4f:bf:6e:37:93:96:ee:e8:00:58:a2:
0c:93:5a:99:cb:c6:de:f6:c4:bf:81:5a:18:9a:92:
78:e3:69:16:cc:00:9a:08:10:c9:24:b9:e0:b5:07:
22:14:ef:ef:54:36:ff:a3:4c:10:66:cf:2d:b8:91:
e9:ab:4f:2c:a4:94:13:09:1f:d5:b7:c6:d3:b7:56:
fa:0b:13:89:eb:18:0d:97:ef:f1:71:bb:1f:8a:73:
0e:1f:ae:a1:77:fc:50:b3:7d:a1:40:af:92:dd:be:
48:62:b7:2c:aa:0b:95:d6:c1:8e:19:0f:95:1f:91:
b6:f4:a9:40:f2:8d:c4:b7:16:43:aa:38:12:a0:57:
d1:10:5d:b1:24:28:52:13:f6:b5:d3:d7:48:2d:13:
ac:0f:30:da:63:63:7d:1d:bc:82:1f:11:7a:03:79:
1f:f1:77:27:ed:b8:27:82:87:a1:55:27:a4:68:0f:
a7:42:9e:3f:e9:72:d2:0c:af:78:21:a2:6b:65:78:
87:7d:86:74:04:c2:33:d1:50:f5:f0:29:81:46:4c:
4a:99:2a:5c:44:99:4c:10:d7:18:be:ff:96:6b:b7:
62:34:2d:f8:bd:62:90:57:ed:be:f4:3d:33:50:3f:
7b:8a:0b:0a:47:19:b4:6b:97:b4:a6:78:f4:86:49:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:13:E9:03:08:F5:48:68:61:1E:21:F0:BA:9D:22:D9:EF:7C:11
X509v3 Authority Key Identifier:
keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9b:f8:17:9d:3b:50:fd:d4:8a:a3:ab:0b:8c:ce:e1:55:c2:
61:06:19:4c:7d:d4:18:5d:9c:02:10:a3:f9:b4:e1:71:62:9a:
48:04:ae:bd:40:b5:ae:04:d0:77:45:4b:94:ad:47:61:1b:28:
b1:26:ab:b7:1b:50:f8:b0:54:f3:9d:9f:ef:5b:f7:77:31:97:
b4:d7:64:a2:71:51:6d:89:17:51:d9:39:98:e8:89:69:f6:f6:
63:46:8e:f0:64:ea:1b:b1:c1:74:a5:51:aa:5b:7a:a5:b5:bf:
98:40:1c:6e:d9:77:f8:87:e6:1f:fc:4d:6b:fa:d9:7c:cf:2e:
97:0c:ec:1b:5c:d3:b6:7a:32:6d:5b:35:1a:5a:79:72:b4:21:
09:82:10:9d:da:cb:ef:43:62:01:01:c7:c4:64:5a:4f:05:f1:
53:54:37:a1:45:94:06:3d:94:e2:5f:03:1f:3e:99:85:04:6f:
f2:de:30:2d:b8:86:2e:16:5f:63:d5:5f:6e:f2:d5:2d:79:96:
64:75:e6:57:ea:b3:58:6a:04:d3:02:14:b7:40:2b:fd:b9:1b:
55:80:b9:54:3f:47:c3:c7:ff:b0:61:da:a3:45:63:76:52:75:
09:4b:be:46:2b:6a:59:ac:b8:4f:3b:1d:79:c0:90:45:c9:ad:
62:44:0b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:39 2025 by rpki-client