Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: IZ1sLC2o/4fZjP4yShsevo4DSL+ylLXxUqskDqWe5Vc=
Subject key identifier: 0E:8A:14:71:FC:40:73:E5:BF:B7:56:12:1F:6F:DE:5F:51:4A:23:63
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0194BC72E562F947CAA53A720D6E24A6EC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 032D
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: AVDg8gmbT4/Rc144jsYVctPulhILQG/wsUVpTJ7nmU4=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:62:f9:47:ca:a5:3a:72:0d:6e:24:a6:ec:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=0e8a1471fc4073e5bfb756121f6fde5f514a2363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:10:ee:3b:b3:0e:00:20:bc:93:9e:ce:63:
c3:98:c0:a8:4d:a0:18:25:32:01:af:b7:67:2b:24:
13:94:5c:72:a5:af:2b:9c:59:32:95:c3:82:e6:56:
c5:8a:e7:cc:c9:65:49:f4:b3:c4:d4:9f:81:ef:ae:
1a:21:97:ac:13:4f:c7:ff:ee:42:78:96:f2:4c:bf:
71:ec:6d:42:15:a2:a1:3b:a8:44:c6:43:73:b3:a0:
0e:a6:ec:8e:96:4b:6b:f8:e2:33:ca:a6:8a:d6:c9:
18:79:29:a2:4c:0f:f7:fe:20:3d:9b:f0:53:9e:2a:
32:7b:c2:e3:a6:e8:62:af:9d:73:a7:fb:ed:ac:75:
dd:49:11:8c:99:ba:8b:32:8c:b4:d2:bd:b2:dc:d1:
e3:c0:67:2e:12:a6:39:32:72:90:a3:b3:39:2c:e0:
22:06:24:34:92:13:00:c3:57:17:61:d5:24:5d:38:
2e:53:0b:75:5c:d1:9e:20:fc:4b:6c:9c:89:47:9e:
ba:0b:1d:73:af:02:01:ac:04:16:f6:1f:18:83:46:
3a:d8:5d:19:8d:09:ae:18:88:62:9d:ca:0b:c9:1f:
9a:63:42:9f:f5:79:0f:78:91:b4:48:2c:aa:a5:43:
a8:d8:f8:63:00:16:31:9e:c7:a8:24:d5:ea:b5:43:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8A:14:71:FC:40:73:E5:BF:B7:56:12:1F:6F:DE:5F:51:4A:23:63
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c7:d9:a0:e2:65:34:0e:2c:56:1d:e7:31:df:1b:d8:14:07:
59:b9:be:01:42:6b:65:91:9e:a0:73:ed:3f:b7:31:1e:de:30:
8b:7d:35:29:77:6d:6d:2c:aa:90:e3:99:18:a1:47:f5:ae:64:
1d:02:6d:d4:4c:1a:89:da:db:48:0e:11:18:b4:05:8e:9f:a2:
f8:25:3d:de:8b:50:bb:ea:06:eb:44:ac:df:e9:bf:cb:f9:aa:
a9:b3:97:d4:59:70:a3:08:2a:21:63:ce:51:56:26:a1:4f:b3:
93:ae:19:84:e5:24:4c:41:9b:1b:12:5f:3a:8c:04:40:8c:4d:
8a:9d:f6:51:71:49:0e:19:4f:6b:42:6c:c0:8c:89:1c:e1:d0:
f5:c9:74:fc:79:aa:59:7c:06:04:02:a6:5b:ae:e5:f2:1d:7d:
bc:cf:fe:45:fb:ee:5d:42:12:36:cb:16:4c:e8:2d:35:83:77:
c5:40:37:23:da:98:16:4e:77:41:13:39:8a:eb:da:38:3f:15:
8f:53:4d:eb:e1:93:73:e1:64:13:02:4e:59:49:bc:85:bb:db:
54:dc:04:44:35:e2:34:37:32:b6:2f:89:41:29:3a:e0:f4:36:
fd:7f:69:ec:5e:ba:e5:15:7c:0d:b1:a0:6d:e4:58:37:6f:ee:
55:ed:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client