Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: aIVXO1inVBkyXQaGwYusCrgDqNGMkaMMAZWNYZiJiTc=
Subject key identifier: B9:82:68:F2:BD:B5:F1:44:97:4A:3A:DE:E7:26:B0:7A:AE:7E:CC:69
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0194BCA99DA379DDBF023887164883F4A4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0BAF
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: Vbno5BFoLzW26GK5YBIcgHEjKlO9F+vr2/hFR3ZieAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9d:a3:79:dd:bf:02:38:87:16:48:83:f4:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=b98268f2bdb5f144974a3adee726b07aae7ecc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:7a:0b:93:06:6f:19:65:a5:27:83:57:58:
94:34:09:7b:1c:dc:bc:4d:2f:12:7c:15:89:91:d1:
e3:b4:93:ca:cc:0c:48:af:90:39:cd:d3:b2:57:78:
97:dc:91:40:ef:7b:ce:98:29:2b:d4:1f:80:6a:4d:
0f:ce:a4:fc:b5:b3:66:9a:2b:f9:df:3e:60:54:d6:
c8:81:a7:45:5c:f6:79:69:44:76:03:1a:08:2c:ff:
ef:2a:8c:27:ed:d5:de:fb:36:21:d7:7c:ca:38:8e:
fa:49:56:77:95:12:86:2a:9c:42:4d:d0:55:43:3d:
8d:29:34:49:ef:1c:2d:2f:72:fe:13:59:10:84:4c:
1f:9b:ad:03:d0:22:27:f7:ef:c3:56:35:19:db:3e:
c9:66:a0:65:46:b2:8c:92:19:ba:14:57:5f:dc:be:
b3:87:ac:1e:4e:c5:e3:cd:5d:c2:a1:c3:d9:9e:79:
15:14:54:12:06:72:5f:f0:72:b2:5d:46:97:52:2e:
77:b7:ac:e6:db:ea:98:15:86:05:b9:d8:78:e6:3d:
2c:d6:89:39:87:c2:14:1c:77:8a:45:21:4a:ea:52:
1e:22:56:99:06:80:cc:11:a1:8f:82:c0:2d:d9:07:
d2:2b:d1:89:b1:16:39:5c:48:56:35:81:a3:db:e8:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:68:F2:BD:B5:F1:44:97:4A:3A:DE:E7:26:B0:7A:AE:7E:CC:69
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:67:b8:1f:8b:ec:9b:27:c3:d4:1f:95:fb:e9:7f:43:ed:
b8:4c:09:9b:81:7b:ae:d3:62:46:1c:01:8c:20:13:ad:c6:b1:
e5:4b:52:5b:2a:dd:a6:b3:db:7a:8c:73:99:89:d6:ac:d1:60:
e9:a5:91:c3:c1:db:e0:7d:64:c9:7b:1d:3b:4b:a2:fc:5e:20:
e9:32:30:1e:57:b3:46:6b:e2:d4:c5:f4:b6:6c:39:1a:54:c2:
b5:4d:4e:46:97:0a:2e:a8:b8:df:1e:60:32:33:ff:d9:a4:a7:
4d:49:41:ca:fd:11:41:f3:2f:f1:45:86:56:dc:56:f0:df:76:
c3:bb:f1:3d:3e:c0:38:45:fc:b0:3c:c4:d6:4a:3a:91:95:a7:
01:b3:ef:46:22:7e:19:c3:cf:f0:fc:a1:bd:6f:cb:ef:f7:20:
48:22:f0:62:73:b9:80:e2:72:d5:5a:15:0e:15:d7:5e:ca:81:
9f:1c:88:04:22:87:8e:da:a0:9e:33:dc:7c:8d:df:88:82:4f:
57:a9:43:d0:28:52:c8:cd:ab:a8:b7:33:48:b5:b8:d2:56:25:
0e:b3:3e:e5:3c:7a:6f:4a:0c:15:71:9b:81:72:b4:b5:b3:b7:
62:85:8f:2f:ee:75:32:fb:e2:b6:6c:7e:c1:f9:ea:8a:1c:9c:
97:da:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:48 2025 by rpki-client