Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier: ezpKlPLWvrTlWopvDkG1gJQoOt8gY81484Vwv9rihMQ=
Subject key identifier: C8:B5:05:B1:83:F9:68:64:D0:98:6A:55:5E:5B:9B:63:C1:EF:0A:60
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 0194BC3BC523B6BD5B2676FE0C2B3FB28FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: HIZLtDLUBDlemEwAdLpnz2LdcVYN0UDb/1mg40p8ZEA=)
2: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (hash: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=)
3: paZxOmMKFpQKe-8Kne9bRfBeDj4.roa (hash: Ht8nkuSK3tnDGTAuNZ2+oouOY3eOWnt0ge3I9SzF5BY=)
4: tQhpXUNnvGff6XvuqvOKpCTzYwY.roa (hash: Hc4QZ0VrOY7vtGnelWFhq1jyckc5D//hAbmROwzCFcg=)
5: xs4Lhq2dtoSR5NylGdQYpzYAJFY.roa (hash: BY/PFQ7JiAuNhQeV/tshKqWnXgR5ng/nvPLH2dMAqLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:23:b6:bd:5b:26:76:fe:0c:2b:3f:b2:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=c8b505b183f96864d0986a555e5b9b63c1ef0a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:cc:55:92:b2:d2:80:89:0d:3c:3d:49:b6:
69:73:4b:1e:57:b2:f0:83:73:30:4a:72:32:25:1b:
1d:fd:4e:76:ba:2e:28:3c:d9:bb:e3:82:8b:c9:e5:
22:fc:ba:fe:b5:82:04:86:01:e6:fd:fa:39:f5:c2:
d8:7b:cc:14:bc:0b:a0:32:29:6d:68:60:59:38:03:
46:19:d1:d3:45:b7:fb:40:ce:db:b0:92:40:ea:52:
7f:81:24:5a:2c:46:50:a0:2d:75:0f:8a:fc:fe:4c:
5f:6e:81:e8:a4:ad:29:e6:7b:e1:63:1f:80:ce:8a:
74:09:05:e0:e6:46:3c:96:60:d8:64:48:58:94:ad:
67:6c:81:d0:1b:c6:c7:98:96:94:4a:1b:51:15:8a:
86:db:55:8e:30:e9:69:20:e4:24:f2:59:a8:3d:06:
b1:ea:4c:52:d6:96:4e:49:f2:b5:40:96:e0:fc:4b:
68:7b:0d:a3:80:62:47:65:48:bb:af:65:ab:db:d9:
62:23:e1:d5:b8:da:04:68:81:23:97:99:b6:c6:74:
e2:78:03:4a:69:82:f1:89:7b:fa:2f:23:04:fd:7f:
24:8b:3c:e0:7f:e4:a6:86:37:fd:54:6b:4d:af:4d:
c2:ec:c2:76:4c:b9:0d:71:11:94:58:33:59:03:60:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B5:05:B1:83:F9:68:64:D0:98:6A:55:5E:5B:9B:63:C1:EF:0A:60
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:80:35:cd:a7:9d:e7:1c:4f:1e:2d:93:2b:79:30:c5:e7:
b1:3d:1e:7d:8b:a0:ad:52:03:07:f0:fb:96:12:20:22:d1:35:
4f:ed:80:e3:dd:b0:2a:4c:fc:31:f9:06:d3:d7:25:58:73:9b:
e0:fd:d1:b5:0c:e9:ae:b0:25:df:2a:12:6d:07:63:1b:a7:3e:
02:cb:06:8e:f9:3e:7b:78:ea:fd:2d:c1:ee:b1:55:27:4c:88:
89:99:50:9b:44:b1:42:fa:67:d8:49:e8:71:f1:5c:34:62:1c:
91:16:42:77:ce:17:98:1e:a5:2e:f8:ba:dd:bb:97:94:b3:e8:
6e:fa:5e:bd:31:d2:29:3d:6d:cd:68:58:ce:8b:29:de:3d:5b:
9c:9d:17:a6:91:36:82:f3:e3:9f:c6:9c:e8:93:e3:4e:e7:77:
c1:29:14:1d:e6:60:68:b2:f6:3d:17:44:7c:a2:e7:0c:d6:e2:
90:81:b3:4f:eb:e5:7e:86:ec:51:0c:f8:43:a6:d4:7d:8b:91:
a7:c7:24:28:d8:62:9a:75:fe:32:08:2f:34:d7:3a:46:4e:b2:
e2:d3:0a:88:97:af:1c:64:8c:5f:db:3f:41:3e:44:8c:64:e7:
b9:87:7c:57:e6:0a:eb:b9:62:c0:1c:1d:10:db:b9:99:11:96:
8c:74:5a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8Ujtr1bJnb+DCs/so+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjUwMTMxMTIwMDIxWhcNMjUwMjAxMTIwMDIxWjAzMTEwLwYDVQQD
EyhjOGI1MDViMTgzZjk2ODY0ZDA5ODZhNTU1ZTViOWI2M2MxZWYwYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q7MVZKy0oCJDTw9SbZpc0seV7Lw
g3MwSnIyJRsd/U52ui4oPNm744KLyeUi/Lr+tYIEhgHm/fo59cLYe8wUvAugMilt
aGBZOANGGdHTRbf7QM7bsJJA6lJ/gSRaLEZQoC11D4r8/kxfboHopK0p5nvhYx+A
zop0CQXg5kY8lmDYZEhYlK1nbIHQG8bHmJaUShtRFYqG21WOMOlpIOQk8lmoPQax
6kxS1pZOSfK1QJbg/Etoew2jgGJHZUi7r2Wr29liI+HVuNoEaIEjl5m2xnTieANK
aYLxiXv6LyME/X8kizzgf+Smhjf9VGtNr03C7MJ2TLkNcRGUWDNZA2CHQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi1BbGD+Whk0JhqVV5bm2PB7wpgMB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSuANc2n
neccTx4tkyt5MMXnsT0efYugrVIDB/D7lhIgItE1T+2A492wKkz8MfkG09clWHOb
4P3RtQzprrAl3yoSbQdjG6c+AssGjvk+e3jq/S3B7rFVJ0yIiZlQm0SxQvpn2Eno
cfFcNGIckRZCd84XmB6lLvi63buXlLPobvpevTHSKT1tzWhYzosp3j1bnJ0XppE2
gvPjn8ac6JPjTud3wSkUHeZgaLL2PRdEfKLnDNbikIGzT+vlfobsUQz4Q6bUfYuR
p8ckKNhimnX+MggvNNc6Rk6y4tMKiJevHGSMX9s/QT5EjGTnuYd8V+YK67liwBwd
ENu5mRGWjHRaMg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:21 2025 by rpki-client