Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File: qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier: y6uXlPqkTf0hxWc2FWV7WC7CAhBejZijb6QUEpC9V0U=
Subject key identifier: 8E:0A:BF:56:9E:FF:43:0F:38:F0:7A:88:1E:ED:0C:F0:C1:2B:E7:C7
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer: /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial: 0194BC72D4EAEE8A44761E9E5462682D5C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number: 019F
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: Mp8obiVDvMErR143Z1aN4izNPRtWbS/d3W5Q756sXBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d4:ea:ee:8a:44:76:1e:9e:54:62:68:2d:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=8e0abf569eff430f38f07a881eed0cf0c12be7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:46:46:57:e6:f7:01:de:fe:aa:8c:c9:70:
1c:88:07:1d:c6:de:cc:7a:db:de:ae:ec:ec:81:e9:
ed:48:6a:33:48:04:c7:2b:bc:c9:0f:cd:00:d5:8e:
9b:bb:b5:8f:55:a6:8d:27:46:41:a9:59:b4:b1:4e:
d3:8a:72:98:c5:a0:92:e1:48:fa:9b:92:74:4e:64:
41:0d:25:2b:81:95:62:cc:4c:9c:77:ef:e1:20:38:
f1:5f:68:70:7a:8b:50:d8:94:bc:3d:81:14:7d:5d:
41:df:47:20:71:fc:91:a0:ee:69:7c:2f:9f:79:be:
36:d7:86:cd:23:41:92:fb:34:6b:bd:2f:67:77:7e:
9e:8b:c9:d5:8e:36:d4:3a:24:52:01:fd:cb:a8:df:
15:5e:a7:1a:a6:6f:20:e2:6f:28:19:c3:40:07:75:
ef:51:47:fd:de:21:51:ac:ca:e4:53:b6:6b:9f:c7:
31:ae:9a:39:e7:f8:57:f0:df:83:7c:96:c5:7e:83:
5a:2c:51:58:cd:91:5b:a0:16:59:e0:d6:41:53:86:
f3:75:47:ec:c0:52:0c:9a:2e:85:43:e2:d8:f2:6c:
2e:74:59:3e:db:8c:8f:97:08:18:62:5b:f2:e8:16:
59:c5:db:37:76:a9:8e:c1:1f:11:36:fd:80:44:96:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:BF:56:9E:FF:43:0F:38:F0:7A:88:1E:ED:0C:F0:C1:2B:E7:C7
X509v3 Authority Key Identifier:
keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:96:c9:fb:39:f3:bc:6f:0c:6b:27:44:22:01:a1:86:d2:35:
3d:5b:f3:57:2b:fe:67:04:82:68:a6:b9:ad:04:73:c2:c2:c9:
ee:0e:68:d3:2b:42:27:f3:2e:5e:a3:4c:c4:9c:49:24:c5:a7:
d2:17:e4:09:cf:e0:7c:42:7e:c8:08:a5:1d:c2:1e:40:0d:80:
fd:0f:3d:07:a9:fc:ff:49:92:4d:ee:16:1e:dc:c7:f6:7b:6b:
6e:99:f3:c7:52:2b:85:af:e1:9a:15:41:e6:cd:a3:1d:18:1d:
91:0a:0b:9e:ea:14:ca:33:7f:3e:4e:04:03:14:dc:be:0e:c9:
9c:f9:2b:fd:51:39:ef:ad:28:48:f2:af:a3:14:52:7b:15:57:
05:85:b6:e4:4a:64:c7:a4:50:e7:95:ea:1a:fd:a7:27:15:be:
01:80:04:5e:25:22:6c:51:f6:6b:82:28:a0:8f:98:5c:03:b1:
e6:19:3f:f3:56:c4:6a:b6:18:8d:6f:a1:a4:b6:a7:f0:ac:2d:
f3:92:54:5b:06:11:2a:de:1e:0b:e7:15:5a:3e:34:47:82:f3:
2d:9f:6c:28:2e:26:9c:c1:fb:68:98:50:31:b2:ec:37:f5:7f:
a9:48:ac:1b:37:91:59:b5:dc:68:09:dd:0c:c9:65:48:44:6f:
e4:a1:d7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctTq7opEdh6eVGJoLVx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDMyZjU3YTYxMTliNjkyYTJiOGYxNDJjZTQ5NGVjMDhi
MWZjZDgwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
Eyg4ZTBhYmY1NjllZmY0MzBmMzhmMDdhODgxZWVkMGNmMGMxMmJlN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfpGRlfm9wHe/qqMyXAciAcdxt7M
etveruzsgentSGozSATHK7zJD80A1Y6bu7WPVaaNJ0ZBqVm0sU7TinKYxaCS4Uj6
m5J0TmRBDSUrgZVizEycd+/hIDjxX2hweotQ2JS8PYEUfV1B30cgcfyRoO5pfC+f
eb4214bNI0GS+zRrvS9nd36ei8nVjjbUOiRSAf3LqN8VXqcapm8g4m8oGcNAB3Xv
UUf93iFRrMrkU7Zrn8cxrpo55/hX8N+DfJbFfoNaLFFYzZFboBZZ4NZBU4bzdUfs
wFIMmi6FQ+LY8mwudFk+24yPlwgYYlvy6BZZxds3dqmOwR8RNv2ARJYewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4Kv1ae/0MPOPB6iB7tDPDBK+fHMB8GA1UdIwQY
MBaAFKgDL1emEZtpKiuPFCzklOwIsfzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNjQ2ZTgtYmI2ZC00ODYyLWI5YWQt
ZmM3NzliMGQ5ZWVkLzEvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jNjQ2ZTgtYmI2ZC00ODYyLWI5YWQtZmM3NzliMGQ5ZWVk
LzEvcUFNdlY2WVJtMmtxSzQ4VUxPU1U3QWl4X05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5bJ+znz
vG8MaydEIgGhhtI1PVvzVyv+ZwSCaKa5rQRzwsLJ7g5o0ytCJ/MuXqNMxJxJJMWn
0hfkCc/gfEJ+yAilHcIeQA2A/Q89B6n8/0mSTe4WHtzH9ntrbpnzx1Irha/hmhVB
5s2jHRgdkQoLnuoUyjN/Pk4EAxTcvg7JnPkr/VE5760oSPKvoxRSexVXBYW25Epk
x6RQ55XqGv2nJxW+AYAEXiUibFH2a4IooI+YXAOx5hk/81bEarYYjW+hpLan8Kwt
85JUWwYRKt4eC+cVWj40R4LzLZ9sKC4mnMH7aJhQMbLsN/V/qUisGzeRWbXcaAnd
DMllSERv5KHXiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:40 2025 by rpki-client