Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: Ya1Qs1TRJI3rSNpgRBHRbplZDoLZ0ObXuca8qxa1siU=
Subject key identifier: 1A:8B:56:4C:CD:94:24:F2:64:2D:A9:D0:D3:9D:8C:85:BF:7B:AE:CF
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0194BD4E3C28CEFC90FE43FC49AD0DC6DAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 13E9
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: XA4XIlNdjFcS2arqaAA1EQu7mlE.roa (hash: wk8SDWvmZSeMXqljZ31DAz01CTccNz8bt/x/h1sW9z8=)
2: b3daKVNqN9269bFF-QH-2tlagvI.roa (hash: NmiB0EZ16MgPnN/crIN4RLnYXmkOIBWsWNNzZdFZsUU=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: fgIYza8ZHeQozOGHlAKrpeixrQhVTubDOgPOQC4mRyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3c:28:ce:fc:90:fe:43:fc:49:ad:0d:c6:da:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=1a8b564ccd9424f2642da9d0d39d8c85bf7baecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:99:b0:02:de:44:bb:31:46:36:26:1b:50:
25:b4:dd:6e:83:ad:4c:b9:b4:0b:50:c2:af:24:76:
a3:17:be:d0:f9:ea:53:98:49:e9:90:c9:43:70:73:
5c:15:65:ce:a0:b3:87:0c:d4:f3:ca:3c:b0:1f:9b:
d2:20:6b:8f:41:84:f1:fd:45:88:ab:a6:6d:9d:18:
ed:fd:43:0c:49:32:84:fc:4d:85:03:64:86:58:65:
6d:dd:21:d3:29:ae:14:b7:ca:a1:30:04:4d:ae:e2:
55:05:01:80:ae:0d:c9:d2:39:3f:d2:0a:21:7e:bc:
0a:e9:01:d2:03:6e:ce:b0:59:ec:50:79:50:a5:8e:
db:c3:f2:13:6f:01:52:f8:d2:de:d4:f9:2c:87:33:
c4:9c:db:57:1a:f2:9d:dc:7a:b1:09:fc:c2:7b:99:
74:db:9c:9d:5a:74:23:78:ff:39:22:58:b1:c9:a0:
32:3f:3f:02:b1:a1:83:95:29:9b:6a:31:dd:49:49:
6e:68:6f:27:ac:bb:a7:2f:85:18:6f:c3:ae:4c:4d:
ee:8c:3e:2c:ea:01:40:26:88:f4:77:93:84:f5:f4:
50:41:98:f0:35:42:94:68:f1:a3:4e:2c:e9:fb:44:
f7:f8:33:36:5b:bf:fa:b5:c8:ee:50:45:6b:c3:8a:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:56:4C:CD:94:24:F2:64:2D:A9:D0:D3:9D:8C:85:BF:7B:AE:CF
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:13:e4:1c:09:28:f7:56:99:9f:5d:0e:dd:59:5c:f9:c2:
cb:30:7d:76:4e:7a:bd:41:b9:09:77:5a:44:12:9e:7a:b4:9e:
49:83:7c:72:bd:e7:35:be:73:bc:55:a2:ed:bd:e2:78:0b:3e:
bf:3d:46:85:bb:57:3f:e2:2f:50:9b:53:e0:30:17:ce:1b:45:
fa:bf:20:57:7d:6a:17:30:bd:14:19:78:96:45:f9:e6:b6:e3:
9c:ff:41:06:0c:56:95:18:35:40:88:19:53:e3:c5:71:8c:07:
c3:a3:ec:74:bb:94:72:93:1d:d1:13:37:0c:12:7a:09:14:98:
fb:38:83:cf:74:12:b4:47:76:28:2c:f6:9f:85:7b:8c:72:43:
22:91:a2:98:7c:23:53:4b:99:6b:3d:aa:f8:8f:bc:0f:28:8b:
27:98:62:0c:7d:2f:94:29:12:e1:1c:2e:f7:87:25:30:26:94:
74:e3:26:6f:5f:06:d6:95:92:85:7e:3b:be:02:a4:19:b3:66:
c4:c4:c5:09:ef:9b:bb:89:f7:d9:79:89:eb:05:b2:59:93:5c:
27:5f:78:8f:82:08:5c:e7:3f:4b:ab:ca:57:10:92:22:d9:82:
8e:00:f8:3b:7d:0f:2b:e9:1e:34:7f:50:90:10:00:c2:57:01:
bf:c5:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:52 2025 by rpki-client