Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: EOiENuuNEjE+SPWOd/LvLCujUSjoMo3lii1qR4eam04=
Subject key identifier: EC:38:AB:B8:FC:AB:90:67:FD:86:A6:B6:8C:96:EE:38:01:10:72:55
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0195E00F90F76D0B3618EC2475D106656B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 04:01:11 +0000
Manifest this update: Sat 29 Mar 2025 04:01:11 +0000
Manifest next update: Sun 30 Mar 2025 04:01:11 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: n+QN3mQggWy9B6N9uByUL7AAIRMYayeYqevmSMqMtqY=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:90:f7:6d:0b:36:18:ec:24:75:d1:06:65:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Mar 29 04:01:11 2025 GMT
Not After : Mar 30 04:01:11 2025 GMT
Subject: CN=ec38abb8fcab9067fd86a6b68c96ee3801107255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:23:23:ba:d1:83:6d:4a:e0:53:2f:56:d4:
a6:44:2d:51:05:20:52:29:d2:a0:43:c5:0e:d5:5a:
01:3a:bb:83:50:87:2b:f2:5e:86:34:1b:02:37:39:
a8:6a:f5:e6:72:25:c0:31:72:49:57:ba:0a:f7:f4:
d0:f0:4f:9b:f5:8a:ff:4a:4a:9c:45:fc:4f:c9:89:
90:49:c1:e2:46:99:e4:21:c9:55:41:c5:9b:d7:17:
fd:c2:dd:cc:f7:7d:09:e7:2a:2e:2c:6a:52:7d:1e:
a9:01:f5:15:95:a2:15:06:ec:7e:51:bb:0e:56:51:
72:e5:6c:a8:d1:25:39:e3:28:67:2a:08:be:b1:89:
f0:70:55:c3:06:e0:43:37:8b:0d:67:eb:df:c5:a6:
44:7c:9e:98:43:6e:85:a2:a1:ed:8d:25:1e:12:01:
4a:2c:31:0a:9a:ac:04:72:93:8b:28:be:1a:e0:d0:
3e:f5:e1:08:16:ef:9d:e1:9a:d7:44:45:aa:3b:90:
29:ec:a4:ae:ca:d0:b2:4c:25:2a:89:40:d0:99:81:
5d:4b:99:dc:78:82:bc:d1:7b:f4:8a:13:20:4a:8a:
cf:38:21:54:1c:f8:57:98:9e:ff:e9:ea:17:d2:ca:
34:82:cc:36:fb:ea:a5:c2:b6:e7:06:ea:78:c6:2d:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:38:AB:B8:FC:AB:90:67:FD:86:A6:B6:8C:96:EE:38:01:10:72:55
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:be:80:b2:a5:8b:1e:20:8d:59:80:10:0a:f2:c5:ec:35:df:
01:b6:d8:54:d7:3b:27:be:48:36:f7:44:56:95:be:4a:22:91:
1f:1f:15:ba:01:e6:63:80:cb:d3:28:1e:03:23:95:36:36:ff:
1f:f3:ef:23:52:70:49:8c:5a:56:99:61:c7:3a:fb:c2:60:a7:
71:62:bd:1f:fc:74:45:c2:05:2c:c2:e1:c6:58:fe:8f:49:9d:
35:63:eb:23:55:87:17:1c:59:90:c2:07:57:b5:21:b5:3a:ac:
30:52:c2:47:43:36:ba:29:4c:43:eb:83:a1:45:31:d3:d3:d9:
38:24:03:d2:62:4d:6f:12:a1:36:05:1e:03:ce:ff:ff:da:3b:
b2:11:8a:d2:b7:71:74:ca:43:c5:70:23:ae:67:87:b0:67:da:
30:d5:64:1c:96:e1:7e:57:06:02:09:af:57:09:53:57:d7:30:
d9:fb:5f:e5:b2:fe:44:b5:02:76:05:d2:8b:f3:04:25:0c:c1:
ce:78:70:c2:b6:54:ca:e5:9b:d7:9b:b9:b0:80:bc:fa:60:f8:
32:47:34:14:60:be:b7:25:84:31:0a:f9:ca:1a:82:2c:fe:23:
4c:84:07:c6:77:f3:b5:3b:d1:7c:87:54:2a:93:18:b6:cd:df:
1b:25:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:05 2025 by rpki-client