Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
File: q9G6riGifK2umCjVKOHXVXoWiXQ.mft (raw, json)
Hash identifier: xdA1ZGtCDPgvgsoPNfNPBz7bZia1Dr1PpJo3lCWFvts=
Subject key identifier: E6:40:4F:92:A1:CA:D3:90:29:FD:13:5B:EE:8C:AD:D5:4C:3C:C5:3F
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 0194BBCECAB697E19A8AEBC7F4EA7CABDAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
Manifest number: 07C8
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: 9sqGPYj2kmPhs-twq95bbUkUW9s.roa (hash: +xb7+XiJTwNpBHY8QeifjjhjWqMX+rObx+Ijba3BztE=)
2: q9G6riGifK2umCjVKOHXVXoWiXQ.crl (hash: WjhY6Vt+SpIeHSbHC52w30rp3XRdTMM6LEWAPGtVR2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:b6:97:e1:9a:8a:eb:c7:f4:ea:7c:ab:da:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=e6404f92a1cad39029fd135bee8cadd54c3cc53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:4a:de:0d:d8:ab:33:2c:c7:46:48:7e:4b:
cd:8a:60:37:46:43:1b:5f:46:fc:4d:2f:55:1e:d3:
75:0b:e0:17:1a:f8:65:e0:28:b2:da:b9:b6:77:df:
26:63:0f:58:b8:55:e5:13:a5:b6:db:84:22:ba:05:
e2:cc:80:9d:f4:01:70:a9:83:e5:85:65:7c:f5:e2:
2b:6d:98:78:5e:e0:a7:d1:b9:83:b9:9c:1a:9a:08:
d9:60:8a:67:39:da:c5:64:a6:27:07:85:63:c9:43:
ef:28:96:b9:2e:48:c4:79:1c:b6:15:73:5f:61:97:
7c:59:a1:8e:4b:87:0e:a9:31:0d:96:ec:cf:cc:3f:
84:80:2e:60:22:7b:e1:12:30:61:e1:d9:5f:7a:0c:
d1:a2:a0:61:78:7e:33:14:b7:3f:af:d3:c7:9d:69:
24:fd:a9:72:7c:52:ee:74:34:27:51:cf:fb:eb:ab:
2d:ec:a1:1f:8b:54:c5:45:59:1b:0d:d2:3f:16:b9:
e9:b7:6d:51:eb:93:7e:7b:d4:b4:59:c3:4f:fd:02:
e2:a1:53:25:8b:83:25:a5:40:d9:f3:a4:56:43:bf:
23:7a:a1:9f:dc:6c:f1:02:9f:9a:89:ea:04:5f:5b:
c6:d4:86:6c:65:f5:c3:f6:37:ac:50:04:06:d4:da:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:40:4F:92:A1:CA:D3:90:29:FD:13:5B:EE:8C:AD:D5:4C:3C:C5:3F
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:7e:90:02:42:dd:8b:d0:79:a9:f4:23:c7:6f:40:5b:5c:
3e:ec:e3:31:de:0c:a9:1a:90:00:ac:ed:1f:41:85:93:e4:4f:
06:ff:61:a4:a2:19:e2:c5:3a:0b:1d:15:ad:43:d6:3d:13:eb:
ab:2b:74:44:87:7d:a8:e6:48:5b:01:5a:de:3e:68:27:36:83:
c5:25:10:0f:57:b6:e0:8f:5e:2e:49:ce:54:d0:52:81:a6:f3:
d6:2c:ae:98:17:32:01:d5:3a:ad:8e:7d:6e:f0:56:07:ec:f3:
ac:3d:35:e3:d7:66:15:ce:42:1c:49:60:79:2d:17:64:66:b5:
11:99:e1:13:d2:82:bc:69:32:ca:46:4e:a4:28:61:49:75:23:
a9:81:e4:5f:e4:78:bd:c9:0a:de:d9:86:be:aa:76:17:87:68:
6d:73:f4:1c:ea:84:a7:a7:80:0d:10:f6:12:b5:23:4c:51:88:
50:c1:8d:93:e1:bb:27:12:fe:91:3c:e7:84:24:1f:2b:d1:ec:
4c:80:62:bf:e2:bb:13:3c:4f:04:69:7d:f9:44:6b:09:5f:86:
ab:c1:be:17:6f:21:bd:77:20:23:3a:fc:85:9e:08:d9:00:f0:
93:7d:b7:9b:36:6a:c9:ff:2d:d9:96:99:12:6a:af:b6:b5:8a:
ad:44:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:15 2025 by rpki-client