Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: v/97BnTzqfOwN2oqdx/enzYOs2Y7FR1wYXGVuFhAm9M=
Subject key identifier: 5B:12:00:45:7D:71:63:86:FE:6D:1B:78:F0:B4:3A:D3:EF:E0:D3:0C
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 0194BC3CBA4DB427AE9B3CFBC2BCEA006D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: BFw+cDdwyDAS02pLj3JkiocuB+BUlaJjtagb4FC1Alk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ba:4d:b4:27:ae:9b:3c:fb:c2:bc:ea:00:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=5b1200457d716386fe6d1b78f0b43ad3efe0d30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:43:d2:5f:4a:58:0b:56:b2:32:83:3e:99:
b3:f3:01:a8:a1:bd:40:4f:d2:6b:dc:0b:22:d4:72:
28:bc:80:cb:6e:38:08:cb:84:ed:35:14:cf:47:79:
a5:6a:66:23:da:17:a6:7c:64:47:d2:b5:e1:88:d5:
cb:44:8a:26:34:e2:d3:0f:25:98:f7:c5:89:4a:6d:
e7:93:a7:09:53:98:ba:5e:9f:04:d8:02:c5:b4:b7:
29:74:ca:d6:c3:92:7d:04:4f:a9:a1:e9:bf:0f:6c:
1f:21:d6:82:b1:62:9f:44:d3:4f:2c:97:94:39:7c:
c8:56:67:1c:22:a0:44:80:6f:cb:23:2a:b9:51:d8:
fd:a0:81:7f:59:99:7d:ee:26:e3:5f:d3:4e:17:ad:
77:e9:31:76:fd:3c:94:d9:84:fd:f8:f6:71:66:bf:
f7:d0:2c:0b:b7:a2:61:38:2f:7a:b8:da:87:4a:3c:
31:75:0e:3c:b0:02:6a:e7:b7:3d:50:cb:b3:89:bb:
42:5b:95:2a:31:56:eb:76:21:2a:07:8a:96:87:32:
87:fe:36:14:37:44:0d:66:b9:4d:98:77:01:be:c7:
68:ac:21:ea:f9:82:d9:13:e2:66:93:6e:a6:bf:3b:
9a:03:45:3f:61:9f:bf:ce:f9:4c:b9:84:da:d5:60:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:00:45:7D:71:63:86:FE:6D:1B:78:F0:B4:3A:D3:EF:E0:D3:0C
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:55:da:69:26:1c:0c:b0:94:a8:9e:f7:0e:ca:e0:3b:85:da:
1c:9f:ed:14:94:d7:9d:b4:c5:f3:6e:51:26:1e:12:89:dd:62:
f4:12:77:d3:4b:ba:f2:c7:9e:72:65:f0:ea:5f:b7:d1:1a:80:
9a:fb:53:7b:23:11:84:49:c2:8c:fa:09:95:8b:8e:08:d3:97:
08:86:8a:2a:b3:71:20:55:60:8e:91:0a:f5:a0:76:80:78:1b:
6d:3e:88:57:cb:bf:69:54:85:1f:bb:98:54:0b:eb:7d:76:e2:
24:8f:3e:6e:c8:30:0f:91:47:a7:82:0d:4e:42:ab:5f:7e:d5:
3c:ee:cc:43:ae:d4:fd:a1:c0:73:c3:20:dc:37:e1:33:e5:8e:
95:5c:78:04:1c:99:6b:8c:3e:48:e1:6c:44:c0:3b:2b:e0:71:
8d:68:e1:18:f0:c1:60:29:0f:21:66:9e:fd:a4:87:1a:84:11:
d1:7a:ed:6d:a4:28:f4:82:83:14:1e:e4:16:4b:cc:24:6e:0b:
9c:fe:e2:3e:fe:94:f8:42:bd:85:e7:fd:90:25:f8:03:4b:a4:
3f:8e:9f:d9:f4:9b:84:13:50:56:45:c4:b0:d6:2e:0a:02:7f:
99:d2:23:e9:3c:24:4f:9f:80:79:13:91:2f:54:bf:e9:7b:ed:
9b:93:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:47 2025 by rpki-client