Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json)
Hash identifier: 0oh+nkfUoaBWtFOAVvUKh+slFV3RhUpT+r5s/7L48rk=
Subject key identifier: 69:1A:4E:09:AD:E3:69:D2:3B:E2:0D:81:82:30:FD:DA:CB:31:D8:79
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0194BBCE546D412330DE5DF3ABD89A1AF953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
Manifest number: 13FC
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=)
2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=)
3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=)
4: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (hash: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=)
5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=)
6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=)
7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=)
8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=)
9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: yzHC1P/ThDKN1d7bMNbjjqbk28LPWkBlYcefjzwuzF8=)
10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=)
11: gAJbe4QU_JimtKun4JrWZ2kL4n8.roa (hash: PwF3uWOYR1nVszgKW3Z6q4xUS40HSet3V3YCIoOtMwQ=)
12: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=)
13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=)
14: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:6d:41:23:30:de:5d:f3:ab:d8:9a:1a:f9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=691a4e09ade369d23be20d818230fddacb31d879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:f9:60:d4:93:f2:2e:e1:4e:6d:19:7f:04:
a5:a4:96:ee:81:b2:8d:02:54:be:37:53:af:5d:39:
50:1b:04:a2:df:04:18:d9:05:f5:ac:60:04:0a:24:
30:49:5f:6b:e9:e4:69:cc:cb:38:4f:21:7d:b3:23:
2b:42:04:3c:5c:d9:22:75:a7:15:6c:9e:1a:6a:68:
cd:26:f5:d3:a4:09:d6:01:d9:70:ac:e3:f8:24:43:
4a:d2:06:e7:0f:df:0b:d6:a6:6d:2d:9f:34:79:8e:
22:93:44:42:ff:bb:a2:20:c2:a0:5b:34:df:07:c2:
e5:6e:f5:63:e5:4e:6b:c7:c6:a3:4e:81:0a:b2:08:
21:0a:9e:9e:4a:0d:56:4b:82:55:4d:47:0e:de:4a:
cc:23:13:39:0c:d1:1a:b1:58:72:b1:c5:2d:ff:14:
97:3d:a4:1b:15:d9:95:87:0e:13:03:da:5b:19:d0:
75:eb:8a:41:bd:31:9a:b3:88:c2:77:5c:fa:65:c8:
dd:94:13:ca:c1:90:c3:da:05:22:9e:73:b5:5d:df:
be:f7:a3:41:c3:fc:e8:81:7f:d8:28:90:09:09:a4:
a9:b3:14:34:d0:7c:c3:b9:70:b7:3e:51:17:4f:84:
26:57:5a:5c:8f:51:43:fe:87:61:78:e2:e7:40:28:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1A:4E:09:AD:E3:69:D2:3B:E2:0D:81:82:30:FD:DA:CB:31:D8:79
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:aa:e9:a5:a6:65:21:c6:18:47:0a:09:5d:af:f7:c0:22:
79:14:b1:4b:5b:2c:d6:27:1b:19:4a:e8:6e:79:b4:20:3a:c0:
a8:0e:42:90:c9:98:88:27:73:a0:4c:8c:08:52:97:6d:89:3c:
8e:1b:9d:fb:05:12:ce:24:4d:77:cd:98:52:93:1f:75:c4:c0:
cc:58:04:8d:82:ff:ac:b2:b1:f2:c9:dd:65:5f:df:a8:a3:9c:
d1:a2:c5:0e:c6:6d:10:72:ca:7f:ec:2b:38:d7:ea:15:c9:30:
39:b2:43:04:bf:f6:e7:59:2e:c2:ef:d5:9e:9a:f1:36:96:90:
8a:82:09:c7:2c:3e:02:de:5e:8f:6f:c5:8c:1c:a5:29:a3:2e:
27:f4:8c:59:ef:a0:12:15:4e:41:7f:f2:d3:ad:1f:64:e3:b9:
60:42:8d:ce:12:91:c7:39:64:47:af:97:e3:d0:83:e9:fc:bf:
62:3d:4d:8e:80:57:c2:3e:3c:91:97:cd:d3:a0:06:03:c1:19:
47:ef:5c:52:7c:f3:16:34:73:65:1a:54:ff:8e:fe:d6:eb:ab:
6e:f0:11:47:3d:f3:72:0e:80:36:5a:b4:60:c4:4f:8b:17:db:
ac:cc:bb:e7:68:bb:7e:f6:f8:6e:a4:69:34:60:1a:14:93:00:
da:f8:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:34 2025 by rpki-client