Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: 7nts3BSib2IoiudZuBwoXDmva6Yms8URLcLxVSM+A7Y=
Subject key identifier: D0:75:B4:F3:DC:0D:95:C1:02:57:C2:70:51:23:AC:47:5B:92:B3:45
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 0194BC729DD0588E8F56C012941056962DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: FBn1v2zB1JVjcRcZbhGPjhIQq-4.roa (hash: mVYwRlVF+pwgFuj92Y5wG2kGfxiuhyd+s7VwHmVtegc=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: zwkkCGro+DM5KRlP7ttCGR/3GuDsDSfGqrYEVzpumgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:d0:58:8e:8f:56:c0:12:94:10:56:96:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=d075b4f3dc0d95c10257c2705123ac475b92b345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:3a:eb:20:ee:3f:7d:b6:5c:6c:a5:35:b9:
85:89:0a:1c:de:42:20:92:09:4f:f9:a9:df:b0:c5:
0d:8f:58:0b:d7:b8:37:23:29:bf:d1:3a:50:03:eb:
c7:38:f9:d9:47:0a:05:24:3a:81:67:de:54:ef:51:
8d:3f:27:ae:7e:6e:63:d2:00:64:47:a4:ae:c3:24:
85:03:a9:c1:4f:e4:3b:50:c1:05:79:7b:d6:8c:80:
88:c7:1e:ec:69:fc:22:a4:65:60:95:18:b8:ab:83:
eb:39:db:8c:ec:a3:3b:ea:35:36:d6:6a:10:a3:a2:
4d:39:03:7c:05:78:0c:95:01:49:1a:38:54:cd:e9:
73:98:66:5a:7f:c6:6f:e7:da:8c:b4:27:8f:93:49:
9f:f4:3e:96:7d:a2:0d:34:2e:c1:f1:93:5e:61:37:
10:8d:35:81:17:61:57:fa:14:2b:14:ae:9b:00:97:
96:b1:30:0e:f0:1b:46:76:7c:fe:c4:7a:f5:91:b9:
e8:bd:fa:8b:ba:75:a8:77:db:44:0c:23:0a:cc:b5:
03:4c:e4:af:2f:83:0a:a7:43:27:1a:94:ba:ea:4e:
d4:ab:40:eb:d0:d1:11:d4:dd:29:dd:26:7c:aa:ce:
cf:9c:95:76:3b:3b:19:88:09:e3:ea:f4:84:83:af:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:75:B4:F3:DC:0D:95:C1:02:57:C2:70:51:23:AC:47:5B:92:B3:45
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8e:94:4e:63:53:2e:c2:d7:ca:24:6c:bf:16:3c:09:b1:f6:
53:9c:50:17:7b:32:43:92:17:20:66:57:d6:ab:4f:d2:4c:f1:
99:be:19:e0:b8:62:67:51:0a:53:0b:e0:10:df:8f:fd:f5:cd:
d4:be:0e:6d:e0:3a:67:47:28:3c:9f:8e:f5:1c:2e:02:de:f7:
b3:9f:07:9f:f0:14:63:10:06:23:06:8b:1f:7b:27:a4:3e:67:
65:f0:e8:b3:65:d1:e2:c6:b9:ea:58:dd:ff:7e:da:17:6e:52:
c3:85:07:53:cb:9a:7e:88:2e:21:f0:3f:2a:81:fa:3b:1c:5d:
17:40:f0:fd:0b:c0:72:d8:d9:ff:54:a7:fe:d8:fb:2c:92:b9:
40:cc:80:31:ad:fe:f2:06:f1:f2:de:f0:bf:a1:79:7d:aa:a0:
f9:ae:2d:a0:27:9e:52:dc:8a:3b:4d:1a:98:ee:5b:8c:92:e8:
ec:b1:c4:13:27:44:ff:14:41:74:5b:e7:ba:11:4a:44:6f:0f:
c8:b6:7c:de:4e:11:7e:3a:c8:c2:ea:ca:50:0d:02:16:47:ca:
f1:46:9c:e0:19:ab:a4:7f:3f:bd:b7:04:52:40:3e:d6:a7:22:
fb:fe:93:22:e6:3b:4c:62:56:72:45:dd:d1:9a:6b:6b:75:b2:
15:9f:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:25 2025 by rpki-client