Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: RvexkMYuZwzMpqiLJ6mFAmKpR7do+phyrPkHQZZALrY=
Subject key identifier: DA:6C:44:93:39:3E:FD:C9:DD:A3:47:AC:81:22:3A:07:F1:84:AC:9A
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 0194BD854A3232CA2B98873010B417E0665E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 13EB
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: HXTmIJpOXUBrZETa5KpoNsj5ios.roa (hash: wT1yK/NZUtAafpXAtOvFbXEAE831pb+X4Lo1DKNHxx4=)
2: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: MxcTO0C50QOJHPqr9Ts+5n/dVBc2fG4dnsLDE2II1/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4a:32:32:ca:2b:98:87:30:10:b4:17:e0:66:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=da6c4493393efdc9dda347ac81223a07f184ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:1e:89:4c:de:23:17:75:e5:a7:8f:4c:e3:
eb:66:0e:b5:30:bf:80:9f:94:b6:8c:0a:f2:31:28:
ad:50:df:dc:6c:ea:fb:ae:9b:57:6c:bf:1c:05:b1:
48:dd:f7:82:3f:d3:7a:56:65:4a:c1:19:d9:e8:6b:
db:52:38:7f:d0:f2:89:45:6e:3b:65:11:75:de:95:
9a:66:eb:25:ae:ac:c5:f7:98:af:cc:da:18:d5:5a:
94:9d:5d:16:90:04:bf:70:4a:21:31:59:15:91:b5:
53:cf:c4:90:b9:26:26:b0:1b:6d:a8:0d:89:9d:c1:
f2:5f:05:0a:ff:e9:b0:70:b5:bb:4a:d1:e5:63:31:
a8:2d:5d:0e:f2:d3:ca:a6:41:73:f3:78:73:0b:b4:
46:9a:93:fe:f8:95:98:6d:47:73:fe:b9:9f:67:16:
25:05:36:60:71:6f:25:06:44:70:a3:29:14:7d:cd:
f7:d2:0f:e9:04:02:91:6c:87:f3:32:41:d6:d4:d6:
4b:16:ce:ce:ad:29:bb:95:98:f7:43:3e:84:77:ee:
3b:4f:2c:52:c9:f6:a3:df:48:86:ca:73:f7:d4:46:
2f:c9:5b:53:b1:99:a2:81:93:d8:6a:bd:5f:93:81:
35:e1:b4:c6:60:9f:38:6c:a4:03:cd:70:bd:a2:94:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:44:93:39:3E:FD:C9:DD:A3:47:AC:81:22:3A:07:F1:84:AC:9A
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:87:77:e8:47:38:a1:07:eb:8c:4f:3e:eb:82:94:a6:a4:
16:aa:2e:b2:43:cc:03:d9:3f:7d:86:ce:93:7c:c2:ed:cc:30:
92:19:70:8c:2e:bb:d7:33:79:a8:7a:59:77:47:3f:31:1e:4b:
a5:f3:18:bf:00:65:06:fe:d2:13:12:ed:44:25:4e:fc:11:93:
64:96:5b:fc:05:65:84:54:b6:f9:e6:cc:23:fc:f7:a8:91:21:
1b:3c:ba:ac:01:c6:20:4b:b9:73:fe:ec:0e:da:87:82:d8:19:
21:0a:20:5e:2b:d1:53:33:12:da:f9:85:a1:e3:20:eb:c5:bc:
1c:d8:93:ca:75:da:40:b3:79:8d:26:56:47:1c:95:c2:d4:cc:
22:72:7f:ae:6a:9d:23:06:1f:0b:4a:e8:d0:fb:5e:53:55:28:
bd:b3:23:a7:84:df:40:d8:01:d1:3b:a9:16:59:56:97:80:5c:
55:48:83:db:0d:1a:de:49:67:a4:50:bf:1a:ca:0b:a1:62:b2:
3d:ec:4b:98:b3:46:6a:19:16:b7:f9:e2:b0:de:dd:95:23:5c:
c9:05:99:d5:88:e9:5e:99:de:cf:a2:cc:49:fa:be:d0:73:ef:
ee:f7:91:5c:25:f8:e7:48:97:fe:ff:b3:53:dd:dc:85:32:1e:
9c:8f:9b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:40 2025 by rpki-client