Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.mft
File: q_8fd_OXoagPunG00tHbkXs7pqA.mft (raw, json)
Hash identifier: nIkD46PX//SC2dp0n7p9yKG2Ijiv8cIR0rueQWslhho=
Subject key identifier: CD:D6:1A:95:09:0F:A0:D2:34:D4:14:A6:44:67:CD:6F:C8:46:78:A0
Authority key identifier: AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
Certificate issuer: /CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Certificate serial: 018ACAED613B865895FA52EEDD49FD75A806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.mft
Manifest number: 0680
Signing time: Mon 25 Sep 2023 06:01:09 +0000
Manifest this update: Mon 25 Sep 2023 06:01:09 +0000
Manifest next update: Tue 26 Sep 2023 06:01:09 +0000
Files and hashes: 1: 2jYie6g3vQ7dBvp-ZSNqlnWSQ2U.roa (hash: bj4SbXDx6IqbPvZbnjOvGWfrk2TqCM8K6gt/QNnTuEY=)
2: lhSTnz9dSxKaD_7rrY5agYRYVq8.roa (hash: a7FLOwi5Bm4QLhtw2DDoENMYnl8gd0idKkpMQuBhkZE=)
3: q_8fd_OXoagPunG00tHbkXs7pqA.crl (hash: Oka1Cv1wf6N1uQsoPUdvgI0oEy/4XcWkEPqWHv0cXeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:ed:61:3b:86:58:95:fa:52:ee:dd:49:fd:75:a8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Validity
Not Before: Sep 25 06:01:09 2023 GMT
Not After : Sep 26 06:01:09 2023 GMT
Subject: CN=cdd61a95090fa0d234d414a64467cd6fc84678a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:c7:d0:de:27:3a:61:50:46:e5:bc:a9:8a:
b2:4c:d9:5d:55:2c:a5:40:34:b9:1b:07:5b:f7:b5:
c7:23:df:4b:8c:e9:6d:e1:fe:73:c0:d8:99:9e:21:
13:d7:f6:d7:5e:bc:47:9d:35:6a:07:9a:ac:be:46:
ef:d6:79:8b:4b:b2:ee:cf:40:29:b8:f3:1a:91:2a:
46:09:85:5a:d1:8a:4a:d2:a0:24:71:fa:d4:55:3b:
9d:3d:f1:5b:3d:ca:fb:9a:98:e5:19:b9:9d:cd:4b:
61:86:a5:c7:fd:b4:f8:30:87:e7:89:b5:38:46:32:
0a:30:03:86:90:73:c6:16:e3:b5:1d:a7:8a:32:b2:
9a:f7:f4:10:d4:ff:ed:e3:a4:76:29:dd:77:c8:2d:
58:87:a7:00:50:c7:e0:cb:34:92:4a:91:d4:e0:a1:
d8:ef:96:7b:d9:c8:23:d0:5c:09:10:73:d8:58:af:
33:b7:ba:38:79:1c:72:19:5c:5f:2c:d9:46:96:01:
91:44:b8:5f:de:73:fc:09:c5:31:b1:98:05:ea:8f:
e5:43:20:a4:0e:db:ed:2d:4c:ef:e9:d6:49:dc:e8:
8f:6d:b1:84:2b:3b:66:f6:f3:45:9c:db:b9:56:be:
96:b3:35:26:ba:11:cb:2f:1c:11:21:e5:f0:9f:78:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:1A:95:09:0F:A0:D2:34:D4:14:A6:44:67:CD:6F:C8:46:78:A0
X509v3 Authority Key Identifier:
keyid:AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ea:99:88:c6:c9:22:14:3b:08:c0:b3:07:95:45:68:44:6d:
52:2d:a7:3f:63:06:33:c7:c5:0c:6b:74:d6:d0:bb:33:b5:8e:
4a:61:f6:e2:cb:f0:f6:97:b5:7e:76:49:5a:57:b2:eb:10:2e:
53:07:cc:a5:d3:30:e9:d7:0e:0f:f9:6d:24:08:f9:d8:b5:13:
8c:57:a3:d6:6e:f1:30:ea:34:17:15:f2:00:04:34:68:e4:81:
8a:5c:53:52:41:ac:fd:b0:34:52:fe:d8:a5:a8:8c:a8:1f:a9:
25:6a:c6:bb:33:46:16:f6:6c:e2:5a:85:28:0a:bf:f5:d7:60:
6f:c7:de:fe:a8:2d:55:ce:ca:d9:34:ef:4e:51:bf:37:2d:e5:
22:e6:a2:0c:50:a4:63:4b:a2:e8:fc:ca:02:4f:bb:70:db:7c:
37:5b:08:a6:ce:d1:f8:56:fa:f7:b6:31:ef:04:97:fc:36:9a:
3c:ea:5c:53:63:c4:66:30:39:80:e3:a9:08:8e:a7:37:05:d0:
17:ae:b1:36:92:4f:1a:01:67:df:8d:9f:d1:53:bb:77:18:d0:
ba:a9:12:f0:82:34:72:41:fe:3c:29:93:d5:ac:13:b6:07:61:
ea:c3:bb:fa:f0:b9:3e:3e:a4:16:35:d2:60:f0:2c:53:24:34:
b2:4a:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:13 2025 by rpki-client