Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: vvCSlQ2k6vhlw+9nCXzfUsPy9M3gtO6AQ4Aubwt/Qtg=
Subject key identifier: 09:82:E7:A8:9B:E7:EC:68:DA:48:9B:94:E0:3D:42:C8:BC:A3:31:C1
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 0194BD85451C8BAB476ED676A25E7CA66813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 106D
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: 7Ih3/dfNngFmNQMisxBqOz2TJJC1qIekQeSYfdqWSHo=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:1c:8b:ab:47:6e:d6:76:a2:5e:7c:a6:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=0982e7a89be7ec68da489b94e03d42c8bca331c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:04:df:72:ac:e7:db:66:08:ec:35:4e:f4:
30:13:ba:4e:5c:f4:6c:44:b7:c5:83:5c:61:51:7b:
92:27:55:54:c2:aa:36:d1:7e:e7:cc:60:50:41:e4:
4d:59:b5:52:63:92:da:23:cf:65:0d:02:6d:d7:47:
42:d4:fb:52:3a:52:84:74:a1:75:c7:10:68:34:bf:
7a:3e:11:85:e0:e7:dd:9f:35:71:f1:af:de:42:10:
5a:7b:ce:bd:1d:fe:8f:44:84:ad:97:31:14:3e:fe:
ff:ef:40:ba:0f:78:93:89:27:3e:0d:4e:f0:ac:ca:
00:6f:82:ba:8a:58:cd:45:76:2d:b0:c8:f9:f4:8b:
79:49:3f:35:99:c7:3e:16:8c:57:37:63:d3:3a:86:
3d:86:71:b5:8d:4f:d8:83:45:76:43:9c:9f:85:50:
aa:f7:dc:9e:41:a4:eb:98:ff:cc:8b:92:97:3c:de:
58:83:25:d9:3c:2a:8a:97:33:69:43:60:9d:c7:26:
46:45:9c:c0:d0:4c:31:a3:fa:2a:7d:e5:84:3d:13:
a4:17:88:6a:32:aa:a9:e6:ae:88:8b:06:11:97:d8:
3d:19:f6:39:b9:3c:53:f5:a1:25:c1:49:5d:e1:ec:
6e:51:b5:8d:5a:92:b0:be:9c:0e:75:65:9a:6d:26:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:E7:A8:9B:E7:EC:68:DA:48:9B:94:E0:3D:42:C8:BC:A3:31:C1
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:57:32:d9:63:77:e6:19:1a:4e:f5:4d:a1:8e:05:be:a3:
2f:bb:7a:49:ab:2b:9b:54:0e:f0:a1:7f:ba:0e:8c:9c:3f:35:
3e:10:2f:d0:c6:7b:7a:58:54:1b:f0:ba:3a:23:af:91:e9:1d:
fc:5e:7d:fa:b4:a8:67:0b:b9:62:c9:36:e2:f1:ac:88:e0:d6:
67:20:9e:cf:17:31:58:81:3f:d2:23:57:94:23:04:ff:ff:b2:
99:04:d1:8d:08:da:56:b1:f9:d7:f0:3e:3d:63:e6:dc:b6:9f:
28:f0:02:2a:c4:36:30:85:58:dd:6d:2c:2f:1d:42:bb:a1:71:
19:64:6a:25:0a:5f:84:46:39:45:f8:49:a2:de:ad:f6:95:c5:
50:d1:b9:d1:1c:bb:5c:a3:76:27:f4:66:7f:36:1e:af:09:f1:
a6:17:c6:e8:a4:cd:6f:1c:ee:63:6d:0b:b5:72:df:3a:15:42:
2d:d0:a8:66:62:20:56:6e:f5:bb:46:0d:f5:2b:9c:37:99:2d:
a3:57:cc:15:84:87:82:06:27:6a:49:c6:19:11:61:e8:b3:58:
c0:c4:45:1e:95:a9:71:e7:b6:39:f9:d7:11:24:a9:e1:d0:dd:
63:7d:92:ea:8c:60:be:45:db:41:77:d9:fc:67:c7:1d:13:98:
3d:50:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:05 2025 by rpki-client