Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: zIme10FYwHm4Kc4Bpegi/6nQ5VK+PmLzFR7gSxigyQk=
Subject key identifier: 22:B6:61:EE:4F:17:8E:08:1C:CF:0E:E9:1A:27:DA:E3:F4:CC:22:51
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 0194BD4E895A5CDD46C06DCB7A9605BA4277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0891
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: FHDLI9bYbXNNEX1xPBsLptloCmQ.roa (hash: dUgxIYtDxdIs2KAx8ay48gmhZsqwqDo5fBVtBRGq/3A=)
2: U1QXfN2MXshd8Djc_hdqsmBdFPo.roa (hash: yLuh9QxnBO1XIHCjApfjKWmyK37siChSWEQyScihraU=)
3: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: bvFFQh46KALdmZxRAsTc+QOAQ8mUWUpCQ6N1h3R3KhU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:5a:5c:dd:46:c0:6d:cb:7a:96:05:ba:42:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=22b661ee4f178e081ccf0ee91a27dae3f4cc2251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:66:38:6c:1a:a9:16:2f:6d:01:22:42:95:
27:1c:15:df:4a:59:70:e2:da:72:f4:6b:2e:f1:fc:
cf:de:29:48:6f:3c:f7:66:75:61:b4:92:1d:38:3d:
e2:a5:e3:62:8a:4f:31:e9:44:aa:a3:5b:02:d0:77:
76:25:5a:49:07:15:d1:35:e2:1e:2f:13:68:67:07:
c8:0e:a2:7a:34:04:3d:8f:13:cf:d1:19:06:8b:20:
a5:b5:6b:de:e2:f0:cd:2f:28:83:44:cb:d1:05:21:
00:cf:f3:ec:12:9f:58:73:95:7c:64:9d:f0:1a:4a:
67:56:de:7e:bc:37:54:3d:7f:4a:d3:dd:ff:19:dd:
9d:8f:4d:f3:7f:38:70:42:73:5c:d5:be:60:5b:1b:
b6:70:2c:c9:3c:61:6c:b8:5b:14:f1:37:69:2a:3a:
ec:97:42:80:0a:a5:f7:a1:5b:c7:e2:f8:da:b0:ed:
04:32:b6:3f:5b:97:15:26:73:56:ba:d2:f3:54:35:
a5:b7:2b:cb:c3:f2:79:8e:f1:87:c5:24:aa:4c:05:
9b:03:b9:ef:ea:5b:8b:a7:44:83:3d:26:95:8d:f6:
9e:d6:45:c7:5e:3b:8a:ec:a7:c6:7e:e8:86:35:29:
26:98:97:64:9c:a6:ba:8f:45:56:c4:f0:63:d9:79:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:61:EE:4F:17:8E:08:1C:CF:0E:E9:1A:27:DA:E3:F4:CC:22:51
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0d:71:63:c5:dc:e7:33:c1:55:a0:ea:ac:db:43:e6:df:63:
6c:d3:47:5d:e1:b4:3b:53:d7:f6:96:97:8a:03:05:f1:4b:52:
00:b5:d4:f8:fa:92:2c:76:b7:0d:4e:cc:58:e6:e5:9f:91:d4:
74:41:92:5a:e8:70:f1:5a:bd:b4:27:4a:5d:b0:43:e5:43:d3:
a4:87:05:2a:ce:dc:9d:e5:4b:b5:cd:49:93:73:dc:5e:83:c5:
a4:3c:e9:ef:ac:99:4a:61:c4:46:06:23:7e:f0:b1:b4:62:ed:
b2:e0:8c:78:dd:0f:34:bc:db:0a:d9:c2:fc:d4:39:61:c5:57:
68:cb:68:4a:7c:79:02:23:26:1e:40:d5:fd:3a:7d:08:28:01:
e8:8b:74:41:02:da:39:69:13:fa:88:ff:f0:62:33:df:54:9c:
00:16:9b:ec:00:61:16:b7:41:0a:6e:40:d9:0d:2f:6d:f6:00:
8f:59:ac:40:1b:01:52:84:5a:a0:90:ba:04:0c:88:97:30:15:
af:f7:df:82:25:c5:f1:bb:c6:64:a5:bd:ae:3d:84:55:ac:fb:
f2:25:e4:1f:aa:c6:7e:e4:11:4e:a7:2a:60:92:b7:8a:12:9f:
29:f1:b7:51:ff:51:59:c2:ab:29:80:95:ec:1e:54:3d:64:18:
43:23:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:45:26 2025 by rpki-client