Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: YaCbxejmDQJflDXx8eid0KhUmjlATZ6wPtKv8wDE7bk=
Subject key identifier: F0:6E:17:A7:A9:66:9B:88:C7:54:BE:DA:C4:CA:44:54:58:33:6F:62
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0194BC0521D92FD475CAE4C3447A73AA0149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1405
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: 8n8YYrSrpQaHkDd69+2JlAdPWiDSw8hiowWpoE9M8RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:d9:2f:d4:75:ca:e4:c3:44:7a:73:aa:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=f06e17a7a9669b88c754bedac4ca445458336f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:30:40:da:84:a1:42:c5:69:f3:27:db:82:
dd:b9:24:73:07:3f:de:00:57:3a:9f:f9:fe:2c:31:
a7:ff:0d:5b:a8:bc:59:e0:a1:32:94:ac:8b:71:c2:
d0:46:34:97:4e:08:b5:b8:e1:05:ec:09:7c:9e:2b:
10:98:b3:d5:e1:8d:b2:49:9b:0b:06:5f:a3:c7:84:
8b:8f:de:1f:6d:78:41:70:ce:a2:2b:e8:46:8c:40:
48:63:f9:0f:d7:ea:94:a2:52:6c:a1:4c:92:74:bf:
92:f5:eb:ad:80:67:77:46:08:8e:23:8b:70:e6:26:
20:88:df:4d:1e:39:dd:06:56:1e:92:fa:96:75:11:
47:33:69:b4:55:3c:e3:71:a4:95:9d:f5:de:ba:87:
32:87:0f:50:e0:45:48:dd:aa:95:8f:f7:d4:a5:ee:
93:76:55:98:57:e8:df:f9:7c:2d:1e:75:c2:72:eb:
b9:e8:82:a7:c3:77:de:62:57:31:4b:d6:c3:90:d3:
d0:be:b8:23:90:aa:c5:47:0e:12:80:79:f5:9c:31:
28:49:bf:b5:e0:41:56:b3:1c:16:cc:28:e1:64:9f:
ff:cd:45:24:c5:74:09:b6:4a:0a:c2:b8:78:f5:32:
6e:e4:77:2f:db:7b:bd:b8:10:77:2b:a1:2f:57:92:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6E:17:A7:A9:66:9B:88:C7:54:BE:DA:C4:CA:44:54:58:33:6F:62
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e5:22:95:06:47:0e:aa:11:8a:4f:82:b0:c5:2e:db:64:63:
d7:3a:9b:d6:19:a3:fc:0a:5d:81:c7:20:2e:0a:4c:d5:3a:5f:
62:1b:e3:1d:f9:e6:3d:09:13:61:c2:4f:ea:3b:da:ce:c7:5e:
65:af:47:da:87:cd:cf:24:91:a5:4a:4b:33:b1:b6:7b:bd:5c:
a1:d2:7c:e7:5c:fb:97:a9:44:db:1c:04:4d:be:60:4c:27:72:
c1:66:33:8f:1a:2e:8b:08:ae:4b:8c:3f:83:d1:be:98:83:b6:
c6:3b:ef:b1:3e:f9:02:58:e1:6d:6f:1f:20:13:f0:3d:70:ce:
de:99:65:c6:b5:d6:74:f7:5e:34:09:35:66:43:39:8c:cc:02:
2e:ad:a6:f5:4e:25:3e:81:3a:36:7e:d5:94:28:36:31:60:33:
ae:73:b0:cc:3c:62:76:37:4d:2e:19:9c:f4:c3:e3:3f:c2:ad:
7a:3a:cb:35:bb:fc:98:be:6e:22:39:1b:54:0a:ac:08:4f:51:
b8:80:24:f7:d6:20:a4:12:61:8e:07:ad:40:ce:c3:c5:42:4e:
29:2e:7b:6c:9c:f6:d2:ed:62:b5:16:48:fc:97:7c:f9:94:d7:
c2:11:13:80:e5:ed:d7:bc:8a:c9:d5:6d:66:fc:98:f2:96:f5:
27:38:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:37:39 2025 by rpki-client