Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: /IJB96brZkpaRWDD1P+d1VozPvhZ4EGJ5+Wk1S1mqeI=
Subject key identifier: B3:42:F2:90:2C:12:5B:E1:F3:A4:A6:41:E4:26:DB:08:58:23:96:60
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0194BCE098F807FAC1C32315980A9DC53CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 135F
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: V5hFxLVsGPW7Jn/Q7yEq4OgmShVOeL9T80wHkOpB+wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:f8:07:fa:c1:c3:23:15:98:0a:9d:c5:3c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=b342f2902c125be1f3a4a641e426db0858239660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:d4:65:dc:ad:6c:9a:af:6a:04:67:5f:af:
ea:16:e4:fc:32:e0:82:fc:04:64:24:37:8f:8d:37:
33:e8:70:9b:c7:cb:d7:af:06:9b:29:8a:47:c8:0f:
a8:bc:32:7c:a3:8d:85:40:af:56:0b:b0:95:d6:fe:
51:73:81:50:77:51:58:df:55:bc:94:8a:ae:fe:81:
4f:ba:66:7d:b7:da:7d:c1:89:10:d3:28:c1:83:bc:
4a:1d:01:3c:03:66:08:1c:6f:a0:73:d8:49:8c:52:
a2:57:0d:46:33:e1:83:44:1f:50:7f:25:b1:dc:d3:
cd:ff:4d:e1:09:71:4f:5f:2b:b8:7c:1a:6f:01:31:
ba:43:73:a3:6d:03:46:8d:7a:ac:bf:2e:cc:a2:c5:
12:c9:b9:dd:19:b2:51:5a:03:a6:db:2a:55:d6:30:
7e:59:19:d6:d7:49:e9:28:8e:a6:1d:e4:b3:64:fb:
4e:c3:a1:5b:d4:c5:79:99:75:d7:96:84:1a:c0:d5:
c4:4f:fc:59:5d:f1:34:46:fe:48:ed:71:77:92:82:
1f:7c:9f:19:36:b6:62:db:11:14:98:d6:fe:3c:23:
42:b5:29:da:f2:aa:7b:d8:dc:c8:34:2c:e1:06:b9:
24:36:37:99:f0:00:35:a4:91:dc:7b:db:b2:b2:b0:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:F2:90:2C:12:5B:E1:F3:A4:A6:41:E4:26:DB:08:58:23:96:60
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:46:90:a5:93:19:8c:a2:56:9c:08:e3:92:fc:ae:36:43:
13:d8:1c:49:0e:1d:67:c3:bf:6d:07:5b:14:87:0b:b5:00:56:
68:d8:ac:bf:2d:8c:f8:ea:c8:21:5d:05:ab:56:b8:8f:a4:bc:
26:85:80:98:89:f9:d7:ae:bb:e7:38:1f:20:c8:e4:54:c1:ab:
61:ea:d7:37:4e:3e:a8:50:11:30:b3:51:cd:56:71:82:ae:3f:
93:8d:00:51:14:04:f9:69:ff:a8:9d:85:85:c9:db:da:05:c0:
a4:b7:08:3f:3b:f2:3a:68:85:f6:bb:d0:df:38:d7:d1:4c:9f:
1c:93:8c:ac:96:8a:c7:3c:4b:9b:ac:60:b8:93:ee:7d:2a:7d:
a1:a2:09:53:cb:95:9f:05:8e:c2:4a:dc:21:ea:1d:a6:33:87:
17:69:14:10:cf:86:11:a9:00:50:f0:0e:e5:29:5c:0c:0a:65:
f5:12:85:89:95:a0:4f:87:22:80:2c:26:4a:a1:ee:45:dd:e9:
4c:dc:4a:b2:0d:a7:4c:14:b3:56:cb:f8:19:80:39:ec:f1:19:
9e:34:bf:d9:d7:ab:a9:24:e8:22:0c:3d:3a:7e:ff:74:d4:45:
56:ee:f5:4f:81:4d:cb:66:9c:b5:f6:54:9c:16:73:3e:62:07:
85:81:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:28 2025 by rpki-client