Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: GS2KEyymAMGZ+MFBgtyj79JyfG/89uy+XNV/1CPT79U=
Subject key identifier: 8C:F9:3E:BC:96:0B:FF:62:3B:CA:DC:09:87:41:BA:54:BE:A1:6F:A6
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0194BD4E7BD6446111F495949E3B907622C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 1304
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: 2by+WyWSUV1baUE1IofFtVhsDkCoekh+MBYQgh0NBIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:d6:44:61:11:f4:95:94:9e:3b:90:76:22:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=8cf93ebc960bff623bcadc098741ba54bea16fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:92:e9:4e:fe:ca:ad:17:d8:e6:d1:2d:58:
8f:e9:4d:77:d5:fd:19:22:75:60:1a:b0:a9:5a:09:
47:1b:a2:0c:0e:c6:99:18:dd:ac:29:67:91:2a:c3:
69:1d:b2:10:a6:91:ac:b4:8f:f6:04:55:f1:f9:ae:
30:10:f9:26:92:56:10:e5:16:4f:7d:cf:29:ff:f2:
3a:a3:34:59:52:b5:72:59:1f:fc:4d:bb:07:f5:ab:
a8:62:d5:97:f0:d0:8a:b1:af:d4:bd:4c:5b:5f:f5:
f5:65:42:ca:d5:17:2a:ed:d4:99:2a:4b:82:29:92:
0a:48:f9:09:19:17:4c:1b:7b:80:61:5a:2c:34:87:
b3:18:9b:79:d8:a3:eb:38:4f:b6:41:ab:78:a0:bf:
29:71:5e:21:97:74:a0:de:e2:c6:40:24:af:77:7e:
a5:0b:2d:08:e0:95:4a:bf:f8:22:46:04:9a:4b:62:
aa:93:b0:bc:4c:23:60:94:70:a4:c4:0b:49:e4:e1:
a5:35:c5:8b:91:45:81:ac:39:7a:ce:d1:48:1f:2c:
15:0d:20:3f:e0:e8:9d:dc:cf:22:4f:ef:8d:a6:59:
87:32:a7:0e:33:71:61:eb:fb:e5:0b:54:d5:70:63:
f6:08:b8:20:3d:5e:c8:0e:04:03:99:1b:d4:67:b5:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F9:3E:BC:96:0B:FF:62:3B:CA:DC:09:87:41:BA:54:BE:A1:6F:A6
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:67:20:67:ac:b4:0e:b6:22:df:a6:ad:86:d5:5a:ec:6d:
7c:d4:84:cd:03:09:47:99:e8:fd:c1:88:26:16:c1:7c:15:d5:
94:90:f4:97:ed:27:77:bb:2b:47:9f:68:d7:b6:f4:67:57:15:
16:6b:b0:b1:f6:8e:8e:f0:2c:00:27:fa:a1:da:bc:ba:e7:2e:
c2:1c:f2:09:a6:80:b6:42:0e:7e:17:d1:34:28:97:cf:a7:92:
af:14:c8:10:52:71:f6:a6:d8:ed:33:1d:ac:37:2f:0d:3d:ec:
9d:08:37:91:7e:7d:7c:bc:7f:d5:07:11:2f:3e:3f:8b:00:af:
3f:17:f2:ea:ab:aa:05:a0:1c:f9:d4:19:f8:1c:d1:f3:ed:71:
b5:e7:65:5d:fd:41:64:c0:96:3e:be:be:ea:52:8b:a4:98:28:
56:0d:16:6d:18:24:2a:5f:12:9c:e1:c0:84:2f:b9:00:0b:39:
bf:58:7d:e2:1c:28:a9:4e:d0:f9:30:06:81:90:ab:c4:67:b1:
3f:66:ce:ef:8a:61:af:7f:2b:29:b4:13:5e:a7:22:42:fd:1c:
70:fc:d5:ea:41:c7:f7:30:f3:16:c8:2b:ca:a4:85:da:43:80:
c0:40:e0:45:b7:0c:c9:8f:ee:7f:15:14:ac:e8:c4:fc:c2:4b:
dc:30:86:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:24 2025 by rpki-client