Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: JDAHivjcgVM06OjO9SLUq6m9Fyt+XOqfY9dEsqbq0XY=
Subject key identifier: 36:07:FC:DF:76:71:A1:14:E3:8F:EC:58:88:A7:7B:DF:7E:52:2E:EB
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 0194BD4EACF901C35977A54FE6667DFD5D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: cUxIwj4VoxsbTi9MBTDHCOgPkvZ8k19U/C300XIzV1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:f9:01:c3:59:77:a5:4f:e6:66:7d:fd:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=3607fcdf7671a114e38fec5888a77bdf7e522eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:d4:2c:6f:c8:14:6f:eb:9b:33:85:ab:62:
da:9b:50:b6:b8:44:21:99:10:96:e8:a6:17:19:27:
f4:28:9d:78:f1:a9:c1:c2:45:a0:e7:f7:f3:0a:ab:
be:7c:e8:16:f5:c8:8a:5a:b1:7b:f6:8c:67:f8:14:
46:d3:dc:b2:e4:30:39:f1:31:98:f5:e9:2a:d1:ea:
71:70:a6:e9:28:0f:a2:cc:b5:a9:80:92:10:79:92:
a2:64:dc:63:32:7f:d4:c0:e0:84:43:58:10:9c:57:
c7:c8:fc:5e:7b:41:74:48:26:a5:06:c3:54:75:6f:
61:a1:b1:f9:a8:d1:9a:03:df:22:3a:18:5a:18:62:
50:ef:bb:a2:53:29:e5:1d:6f:b1:d4:35:0b:aa:b2:
b9:a5:94:1f:21:08:38:38:e8:bb:fb:3b:0c:f3:90:
c8:69:7f:c6:a1:36:08:29:a2:f1:3e:16:1c:c9:0c:
dc:92:76:b3:c1:21:e0:d9:45:fe:58:21:f8:31:c8:
2a:31:e1:b0:65:63:8b:ba:9e:a0:f4:73:57:93:ce:
de:93:d2:71:db:65:80:57:e7:3a:46:84:32:a4:2a:
97:f6:bf:bf:63:a7:f0:4d:1e:1d:e8:e2:97:43:48:
d5:50:f5:27:14:21:8c:51:da:86:a8:13:be:cb:fc:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:07:FC:DF:76:71:A1:14:E3:8F:EC:58:88:A7:7B:DF:7E:52:2E:EB
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:51:06:50:e5:c2:5f:a1:8a:ea:96:f9:84:a2:ff:68:fd:
b8:96:54:64:89:b0:4e:da:a3:2f:c0:8f:e0:b4:e7:d9:dc:c8:
46:1d:37:6a:68:ac:cd:62:3a:5f:d5:3d:a5:1f:42:77:ae:96:
03:ec:4c:88:79:05:40:31:6b:22:8a:df:0c:a0:52:24:1b:66:
09:46:7f:78:61:81:65:31:55:bd:0a:91:cd:bb:c9:f1:a1:42:
72:4d:ec:9b:51:8a:0e:87:c0:41:a5:0f:70:4f:b1:5b:68:b2:
44:e7:89:0f:9a:9f:38:ee:5e:00:e6:ba:41:f4:fd:b9:91:26:
97:c5:58:98:17:59:89:92:1b:35:a0:33:91:58:85:b3:0e:ac:
a6:ad:94:13:33:5e:7d:57:b5:29:27:51:80:f6:1f:38:0e:ce:
02:17:11:8d:14:f6:76:61:51:33:47:c2:a0:88:f8:0b:98:3d:
df:a8:58:00:d9:03:8d:cc:70:17:a1:78:de:51:f2:85:d3:00:
bf:3a:93:cc:f2:e9:4e:df:38:33:21:a1:57:16:5f:05:6c:8c:
b3:35:91:e8:e1:90:ab:1a:af:68:3e:dc:a5:f4:81:b6:34:01:
61:22:ac:66:91:60:2f:c9:30:db:70:41:df:1e:bd:31:f9:08:
3a:71:82:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:20 2025 by rpki-client