Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
File: qAK3PvSotrDgiDqci8bn8BLbk6A.mft (raw, json)
Hash identifier: P1l8F80ln4qfH5zC97bgaxHiLJeByyJKfxbrhwz4V4k=
Subject key identifier: B9:AD:30:FA:06:9C:89:02:EA:E2:90:C3:73:65:AC:56:57:BA:2A:21
Authority key identifier: A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
Certificate issuer: /CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Certificate serial: 0194BC3C343631D58E67C64A4D7888F38BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
Manifest number: 0C1F
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 9ICgCcaHNv6nFSIzYWPqbgMN-SE.roa (hash: kEEuJVyT/3d7mt1VJTzI/Y09M3OYhLbV7WtDMk4v9CM=)
2: E5jMo05UqECQgz0ONfqphOorxOw.roa (hash: pfsgZumJScrPhb10fyVqU4PJBAlF8w76qex2K1C4MnQ=)
3: kVmBpZcBrEyOIwjwA_ZWxav09yo.roa (hash: EvYAV5e04qRQjI42asHDf0fKa+r+5BhYX3Ny8U2hTu0=)
4: qAK3PvSotrDgiDqci8bn8BLbk6A.crl (hash: KQRLfI3SQPL7W6V6Lxs2QDa/3B8VkbsSpmJbYvueBOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:34:36:31:d5:8e:67:c6:4a:4d:78:88:f3:8b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=b9ad30fa069c8902eae290c37365ac5657ba2a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:8a:75:fe:28:71:58:f2:d5:e8:bb:1d:3e:
0b:12:eb:df:a0:86:4d:6f:48:a0:25:0c:cc:32:a1:
02:ff:89:7e:73:a2:03:85:e0:1e:b6:f3:80:d5:91:
12:39:f0:32:13:15:5a:3d:b6:6b:b5:88:88:f4:97:
43:44:f3:fa:98:ef:e1:75:15:ca:4b:a5:11:c9:4f:
4f:c2:11:86:64:6a:92:11:8d:66:dc:44:26:33:a1:
58:21:03:08:1f:fb:5b:17:3b:d2:14:81:13:c3:14:
b4:b6:de:c2:44:1b:af:95:20:f5:8d:ea:c0:53:5d:
d4:12:cb:07:d0:d9:41:e3:25:3c:09:13:4d:b7:9b:
0f:0b:99:05:16:9b:b6:b3:2c:73:c5:77:3c:8c:4d:
38:2b:c4:5d:bb:83:38:ea:38:f2:14:b7:82:b5:5f:
c1:ec:ed:87:ad:39:37:df:61:c1:09:e7:36:87:b8:
67:ad:d0:ac:56:76:bb:b7:15:eb:f3:e5:ce:f0:29:
23:d9:2a:6b:01:88:70:f3:fa:49:3c:36:f9:82:27:
3a:bb:0e:69:e4:20:1a:0e:ed:57:e0:06:eb:51:34:
ee:a7:a5:86:7a:b2:ed:f6:ea:65:55:1f:c9:86:b5:
0c:85:44:4f:54:65:b4:9a:43:1b:58:a9:a1:07:03:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:30:FA:06:9C:89:02:EA:E2:90:C3:73:65:AC:56:57:BA:2A:21
X509v3 Authority Key Identifier:
keyid:A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f1:65:3a:9e:cd:0e:5f:16:be:86:02:d8:b6:f3:fd:b6:48:
2d:05:ae:b2:e5:fe:23:3d:cf:8f:e6:4d:ea:b8:a9:4b:ad:08:
e9:42:fe:00:f9:72:c0:44:08:18:ae:eb:f9:96:3b:f1:93:d7:
7a:d4:9b:81:ac:57:4c:da:00:41:01:c3:b7:66:38:67:e2:93:
43:21:1a:e7:8c:86:e7:2c:b4:ca:6e:2f:d3:14:d9:2f:19:0b:
a1:be:ad:73:3b:9e:83:41:19:4d:4c:12:80:62:0f:69:b0:8d:
ef:ca:58:f9:86:2d:06:5a:e6:97:b1:87:a9:5c:6f:84:02:24:
52:60:00:dc:90:56:d0:a0:d2:61:15:6a:b5:33:0f:bd:76:e4:
ce:e8:d7:b2:c1:13:93:b0:39:db:8a:5d:e6:e5:d0:65:73:ce:
59:36:80:84:9e:90:e3:1c:75:57:c5:0e:48:ff:46:91:e3:c8:
34:3a:5d:62:aa:17:8f:20:ae:0e:73:8c:66:37:90:27:73:b9:
0d:6e:82:a6:aa:d1:69:6f:00:27:f5:0a:11:f6:fd:fe:84:e2:
cb:65:20:eb:02:d1:7b:93:9f:c7:5d:dc:ad:2c:6d:84:b4:bb:
f1:1b:be:35:25:db:d8:e8:4d:83:d2:dd:f9:98:cc:1a:26:a0:
ab:d2:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:04:51 2025 by rpki-client