Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: chol+XIeSqnDXlE1htQsGBmdwLtdTs8qOOEwdpjm+IE=
Subject key identifier: 0C:68:B5:01:04:87:31:80:48:C4:0D:4D:7B:0D:41:FF:2A:5C:CE:00
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 0194BCAA39E1E35245FE4AF9C6DD2637E0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: WbgIwoBvSoYXw2dWYo3pX2pq4OMXGRQlSAImf131rH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:39:e1:e3:52:45:fe:4a:f9:c6:dd:26:37:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=0c68b5010487318048c40d4d7b0d41ff2a5cce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:69:13:83:07:53:4a:61:9b:e7:c2:59:16:
e4:28:4a:ae:e7:d8:30:2a:5d:5b:2f:15:c4:9e:f1:
ff:66:78:a7:c0:1b:e1:fe:02:7c:15:0d:a7:b8:65:
d3:17:77:c6:84:3a:87:c1:7d:8f:bc:f0:d9:bc:45:
f5:35:4d:b7:25:bd:fa:04:c1:a6:a2:ff:14:57:4d:
05:d5:c8:bc:2d:01:7d:f3:19:ff:75:b9:df:7f:de:
dd:10:0a:8d:64:8a:c7:1f:bd:3a:b8:f2:98:ac:7b:
8a:5e:d1:07:91:e8:24:cd:cf:cd:52:d7:46:9e:93:
33:fd:37:71:9a:c9:5d:c1:e7:c1:26:4a:8f:25:29:
ad:f0:c2:29:ac:31:39:bf:61:e2:ca:5e:90:e6:21:
bc:5c:57:c1:6e:ec:ba:3d:03:45:73:b7:82:e6:8e:
35:5e:20:c6:d0:45:44:a9:5e:bf:76:af:c5:10:b0:
df:97:4a:fa:2b:a7:d2:12:19:69:26:26:ce:9d:48:
25:48:0a:b6:0e:f6:57:ec:09:22:ae:07:0e:de:33:
48:74:8f:d2:6e:87:53:c8:d5:0f:20:5e:5c:80:3f:
2b:ab:9d:92:ba:34:1b:3f:f6:90:94:59:37:94:4c:
5d:60:f4:0a:16:cd:2d:ee:ca:d6:d8:d9:c8:50:7f:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:B5:01:04:87:31:80:48:C4:0D:4D:7B:0D:41:FF:2A:5C:CE:00
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:bc:84:4f:44:f1:83:3a:e2:39:e6:f9:87:fe:ae:1d:40:
ae:2a:38:58:9c:8c:cc:5e:56:a9:4d:0b:34:64:02:57:5a:0f:
57:2c:e7:05:9b:92:44:9a:3b:7b:0e:f8:15:49:33:1b:e3:6e:
14:d1:50:e8:d9:08:0f:f3:a0:3a:f1:53:0e:84:50:c8:55:b6:
79:90:3e:f4:cc:8b:dd:c8:9b:07:2d:e2:c0:3f:07:9a:5d:1c:
a0:45:7b:89:c8:a2:c4:d7:49:07:be:b9:38:02:a8:51:7e:12:
56:96:cc:b2:87:46:0c:24:c2:80:fb:0f:d8:5e:e1:a5:c6:5d:
35:8f:7f:3a:ac:bf:7e:48:d0:d1:9e:4c:a3:97:42:58:00:b8:
85:d5:33:c9:4a:6e:35:75:c9:ae:61:0a:51:22:2d:af:f5:85:
13:27:29:fe:31:74:1e:58:24:7b:d9:a3:20:e5:82:38:5a:fe:
de:47:82:99:53:19:eb:e3:74:ff:19:d9:0a:0d:b9:ce:36:bf:
33:1e:f1:1b:2c:b0:a1:3c:00:37:c8:91:bf:2b:61:aa:e6:20:
4d:02:c9:41:c1:37:77:1d:eb:93:b3:c2:6d:17:30:2e:bf:d0:
83:90:f2:83:d3:aa:f5:a1:fc:57:5d:d6:4a:ce:15:b6:df:be:
2a:51:99:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjnh41JF/kr5xt0mN+DuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx
Y2VjODIwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EygwYzY4YjUwMTA0ODczMTgwNDhjNDBkNGQ3YjBkNDFmZjJhNWNjZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pppE4MHU0phm+fCWRbkKEqu59gw
Kl1bLxXEnvH/ZninwBvh/gJ8FQ2nuGXTF3fGhDqHwX2PvPDZvEX1NU23Jb36BMGm
ov8UV00F1ci8LQF98xn/dbnff97dEAqNZIrHH706uPKYrHuKXtEHkegkzc/NUtdG
npMz/TdxmsldwefBJkqPJSmt8MIprDE5v2Hiyl6Q5iG8XFfBbuy6PQNFc7eC5o41
XiDG0EVEqV6/dq/FELDfl0r6K6fSEhlpJibOnUglSAq2DvZX7AkirgcO3jNIdI/S
bodTyNUPIF5cgD8rq52SujQbP/aQlFk3lExdYPQKFs0t7srW2NnIUH9XwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxotQEEhzGASMQNTXsNQf8qXM4AMB8GA1UdIwQY
MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt
ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj
LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTK8hE9E
8YM64jnm+Yf+rh1Ario4WJyMzF5WqU0LNGQCV1oPVyznBZuSRJo7ew74FUkzG+Nu
FNFQ6NkID/OgOvFTDoRQyFW2eZA+9MyL3cibBy3iwD8Hml0coEV7iciixNdJB765
OAKoUX4SVpbMsodGDCTCgPsP2F7hpcZdNY9/Oqy/fkjQ0Z5Mo5dCWAC4hdUzyUpu
NXXJrmEKUSItr/WFEycp/jF0Hlgke9mjIOWCOFr+3keCmVMZ6+N0/xnZCg25zja/
Mx7xGyywoTwAN8iRvythquYgTQLJQcE3dx3rk7PCbRcwLr/Qg5Dyg9Oq9aH8V13W
Ss4Vtt++KlGZtg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:44 2025 by rpki-client