Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: P2BGRqLKyhboX6KRT8fG/ytlXQYOmz0SQHc3Pl+RX1c=
Subject key identifier: D1:B4:2F:35:1E:58:B9:63:CD:D6:7B:B6:81:E3:06:D0:23:2E:40:6E
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 0194BD853B4B02911BCADA9CD3D95464156F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: y62HmWKZv3+B1MgZZmGF9Zo+FMvuVM3I1cyKqABkb5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3b:4b:02:91:1b:ca:da:9c:d3:d9:54:64:15:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=d1b42f351e58b963cdd67bb681e306d0232e406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:aa:51:68:93:9a:74:b0:cc:e9:c8:82:64:
69:71:96:12:92:42:f2:37:4c:cd:d6:b2:b2:58:4c:
05:ac:e8:f1:22:41:e2:6e:9d:0d:b0:46:af:4b:02:
48:ca:40:73:36:3b:cf:11:9a:f6:1d:fd:e3:90:9e:
72:ca:1d:24:e2:b9:38:3b:0d:7e:1a:46:a1:b7:07:
b1:15:68:61:25:47:e6:12:e6:ff:27:d3:02:9d:24:
48:7c:08:c0:0d:6f:da:35:06:22:46:42:70:4f:60:
c7:7f:84:c7:ae:25:14:79:9f:4b:f2:26:0d:75:a3:
be:c2:ad:6c:5f:36:3f:e2:b6:f9:61:59:0c:0a:25:
d6:12:54:a1:ed:99:c4:cb:7a:70:89:83:5e:43:9f:
34:2e:a4:8b:26:e5:34:a7:55:31:27:e7:ba:78:92:
36:59:4a:77:b6:45:17:20:95:db:56:3c:12:8d:92:
bf:c8:f8:04:5b:3c:d8:3e:ac:ae:5b:ff:e4:7c:2b:
4b:13:55:b7:ad:6c:84:6e:24:64:fe:3b:93:2c:4b:
66:11:fd:aa:ce:36:d6:1c:8e:74:08:7e:93:4e:1f:
c2:a4:c3:fa:a6:de:a9:5e:45:1d:4a:8d:99:c2:1c:
da:a0:2a:16:c1:6f:a6:8f:ca:07:9a:f7:91:17:6d:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:2F:35:1E:58:B9:63:CD:D6:7B:B6:81:E3:06:D0:23:2E:40:6E
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:09:8a:d2:9d:30:86:db:b4:af:44:3d:1c:2f:0f:83:48:72:
65:26:c4:1c:b0:4f:05:61:a3:8d:13:14:6a:fc:93:e5:58:4b:
32:cd:7d:0c:a0:c2:79:95:e3:5e:8a:af:45:4a:a5:9e:16:10:
14:e5:93:89:46:f0:0b:2e:81:51:ba:28:33:20:34:eb:e3:95:
fe:a2:40:5b:7f:9a:60:0a:ff:e6:1c:13:63:4c:2f:20:af:de:
14:6c:f9:f9:6f:aa:96:68:4e:5f:b5:34:29:af:35:0d:d6:12:
11:ad:b3:ef:de:ad:d6:9c:d8:2b:8b:e6:20:2b:cc:21:72:84:
13:04:9b:39:5a:4c:ca:a8:72:07:93:e1:62:64:0f:9d:2b:c6:
40:64:f7:0e:c4:80:69:7b:a3:88:a7:0e:ca:9a:18:be:94:a9:
4d:bd:91:1d:69:a7:5a:0e:c0:39:41:b7:40:d1:93:b8:97:55:
10:93:c7:39:99:0a:d4:74:cc:56:3e:55:c9:61:67:6d:d8:1f:
d0:7d:97:24:61:68:2f:07:05:9c:85:3f:30:6b:13:39:c6:d4:
03:e4:e8:07:26:5d:1a:69:00:14:08:3c:75:ed:32:26:ee:92:
7b:7f:1b:26:35:c9:1c:15:a3:35:7e:96:9b:e5:41:d4:cf:d5:
f6:54:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client