Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: C/rbYzIK1j/vIZNOJxLP99ssoU8JdySotZdBZvugAyA=
Subject key identifier: 9F:85:07:4A:07:77:7C:BE:47:15:AA:CA:3C:9B:92:94:DA:37:49:14
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0194BC0519597593129BF888BDD7E20A7D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0BA5
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: ueunGil8+qWYqvLfjx3gG5UQNHzWtV22DEcDaoKGAO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:19:59:75:93:12:9b:f8:88:bd:d7:e2:0a:7d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=9f85074a07777cbe4715aaca3c9b9294da374914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:f5:d9:6f:b3:04:af:7c:83:35:5c:27:4c:
f8:35:12:ec:62:b9:35:9b:be:0e:7e:9b:42:40:63:
31:73:87:f4:a2:61:00:97:17:53:55:cb:2d:20:ec:
49:d9:1c:51:47:32:7f:f6:45:f6:ed:67:55:5a:de:
57:57:3d:a6:c8:51:6c:42:31:f0:85:11:37:5e:a7:
c6:0d:6f:d6:a6:93:3e:db:5e:e6:6b:1e:04:dc:48:
51:24:aa:ea:11:f7:24:79:f7:0b:af:ca:3b:c7:f2:
96:e0:2d:64:5f:80:40:e3:2d:d2:3e:5e:25:bf:1e:
35:b1:c4:8f:c0:74:56:5f:c2:1a:df:19:3d:0b:a4:
6e:39:e7:53:4b:2f:7b:6c:22:74:95:8e:71:1c:08:
cb:31:44:1c:ad:ca:65:3d:05:19:2a:b0:7f:6a:ef:
34:7e:f3:a8:a6:62:71:00:b7:32:84:0a:e7:4a:d5:
c4:02:73:a4:a4:18:8d:d9:1d:4b:a9:9a:63:6a:9d:
a3:80:46:ff:71:6b:3b:34:92:96:e2:48:24:83:d5:
6b:18:71:9e:71:86:3a:39:28:75:31:35:ab:ab:84:
03:29:f8:1c:ac:f3:3e:06:d9:6f:92:70:71:b6:1d:
19:72:1c:fe:d6:49:06:27:b2:65:e4:e6:53:36:07:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:07:4A:07:77:7C:BE:47:15:AA:CA:3C:9B:92:94:DA:37:49:14
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:33:b9:95:ac:04:98:df:a7:95:32:56:1c:de:2f:14:ed:5f:
4f:67:65:ad:d4:b1:c5:91:b8:c5:7c:c0:57:33:84:2c:a1:b4:
bc:0d:0e:a9:e2:d1:5b:45:24:ac:ff:55:1a:fb:3f:3a:55:09:
34:95:b7:0b:e5:95:8a:18:d7:9d:d9:bb:7c:57:10:12:da:bd:
5e:6f:56:d6:3c:45:29:8f:cf:9e:2f:29:77:ac:99:e9:83:f9:
6e:4f:5c:1f:81:b5:ac:c7:97:74:cb:34:80:ef:78:67:e4:d2:
f1:c7:57:1c:16:67:d9:b1:67:75:fc:c1:76:6b:8b:14:82:1b:
11:e1:76:4c:5f:56:e3:ed:5a:83:10:61:4e:6a:38:64:c3:de:
7d:98:26:e3:6d:e3:da:c5:77:bb:b1:63:4b:e3:6e:ef:9e:e4:
fd:70:d4:a7:3f:88:9d:ed:7d:20:fa:31:45:a6:a5:a6:95:63:
06:b8:11:7c:ff:33:d4:b7:68:4b:b9:33:50:5d:49:91:01:9e:
bc:70:91:b5:31:56:4c:ac:57:ba:78:7c:82:7e:d3:b2:a2:ba:
bb:0b:6c:07:4f:13:5c:36:05:50:ee:35:d3:f1:2a:75:85:53:
db:8a:fd:0d:9c:75:e1:ea:a3:6c:2d:e4:d0:f8:c7:96:11:cc:
30:c2:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:13 2025 by rpki-client