Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier: X20tw8XKMegPeGPJDxoWWwm1+C0RhDach11nRuK+Ywk=
Subject key identifier: C4:8E:12:A0:3C:38:78:23:B4:F0:55:8C:5A:B6:2D:AC:68:8D:C6:8D
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194BC72A7933B5E914E3D41840B7354E5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=)
2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=)
3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=)
4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=)
5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=)
6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=)
7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=)
8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=)
9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=)
10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=)
11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 5c+/nw0JsyhvFCjJ/E/E55meEUfaGAVzD48k+eG6ZI4=)
12: qLwaQHbpLKR-VOFMsqI1Dr-brZQ.roa (hash: zu206w/6uZIZGZL13CES5xmLYzoUTsD6JgpbCtCYgq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:93:3b:5e:91:4e:3d:41:84:0b:73:54:e5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=c48e12a03c387823b4f0558c5ab62dac688dc68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:7d:ee:52:52:11:a5:4a:d2:e2:ff:ce:b7:
ab:e8:51:25:5a:c4:ae:a7:a2:fa:36:eb:95:d7:3a:
b2:1d:d6:bb:02:6d:63:f1:a5:01:20:fc:3b:d8:79:
fd:35:d5:89:9a:f1:e7:63:c0:7a:62:4d:72:a3:fb:
f9:ed:bf:c8:01:eb:ee:18:bb:11:3d:91:3f:02:5f:
7c:5f:c1:09:e7:7a:34:c7:2d:44:7f:54:ec:9d:16:
c0:4d:97:da:5e:20:e4:bb:27:17:a7:62:b3:c1:80:
1c:2c:76:4c:07:78:83:ca:7c:30:63:60:fb:8b:98:
f2:3f:ae:7a:73:60:be:81:e0:a4:a2:cf:5e:85:b5:
a9:db:76:a6:ca:db:e5:1e:23:4b:97:0e:d7:dc:25:
1b:60:c9:14:6b:fc:25:d1:77:44:f0:56:76:3a:e2:
a8:48:39:05:25:15:b5:4b:24:6e:7b:1e:62:76:b2:
9d:3a:d7:75:3a:21:ff:15:5a:15:24:fa:f3:cd:5d:
00:17:53:21:81:64:f6:32:a5:ad:53:c8:cb:a8:c8:
1d:c2:a4:71:65:e4:20:51:cb:92:4b:9d:da:bb:ac:
47:63:0e:ed:29:59:da:e9:c8:f8:08:5d:6b:a5:62:
49:cb:59:68:b8:73:8d:fc:e8:9d:a1:74:82:aa:72:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:12:A0:3C:38:78:23:B4:F0:55:8C:5A:B6:2D:AC:68:8D:C6:8D
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e8:aa:8b:01:36:f5:ea:47:c8:6b:1b:66:d5:f3:ef:f2:1a:
b3:c3:fe:8b:91:43:2a:09:37:02:6c:ee:1d:11:a8:55:6b:ac:
1b:48:ad:dc:bb:db:08:67:a1:e1:a2:65:e1:e7:0f:5e:a6:36:
c1:d4:63:5f:28:90:8f:09:39:d7:90:6f:d8:72:67:4e:5e:b6:
10:0d:35:bc:3c:07:ec:4e:b9:a4:43:ff:b6:df:7b:1b:fd:64:
3b:ac:57:f2:ad:22:ff:ca:d3:47:70:e4:c1:fe:7a:96:2b:d2:
14:67:79:de:a4:07:20:c0:cd:f9:cc:32:55:60:69:ad:e3:62:
b5:83:ed:ca:72:13:27:f4:cc:cf:00:ef:3c:7f:ce:be:6b:2f:
df:90:bd:4d:3c:5f:fa:26:90:fb:aa:d3:4e:7d:7a:34:4f:5f:
9d:90:70:46:58:50:bc:01:8e:10:26:5e:f4:d3:50:35:67:c1:
c8:e4:6a:9c:5b:cd:05:5a:f7:78:39:4a:69:fe:71:3b:d4:fc:
57:ed:e3:4c:44:60:b4:7a:3a:dc:a7:e4:6c:2f:e7:ef:41:ef:
95:14:84:36:b8:72:d5:78:02:14:94:0f:01:92:b3:11:70:0a:
49:9b:b9:88:10:54:3f:fc:84:da:36:1a:92:30:af:12:32:fc:
3a:de:27:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:05 2025 by rpki-client