Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: egbrXMO+jHrDZvWjPWDoAHfjKH7qexyToIDnjoh4MAM=
Subject key identifier: 17:4D:AA:B2:04:93:E6:24:31:71:A4:AE:BD:C6:99:7C:3C:5A:33:EB
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 0195DFD8E75266F4FB559EDA4EE39916050B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0C37
Signing time: Sat 29 Mar 2025 03:01:28 +0000
Manifest this update: Sat 29 Mar 2025 03:01:28 +0000
Manifest next update: Sun 30 Mar 2025 03:01:28 +0000
Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: Gh73r6yTGF2vWXoIzo3ziSYDt11oaVyXVu69dObMyi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:e7:52:66:f4:fb:55:9e:da:4e:e3:99:16:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Mar 29 03:01:28 2025 GMT
Not After : Mar 30 03:01:28 2025 GMT
Subject: CN=174daab20493e6243171a4aebdc6997c3c5a33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:f9:cc:29:b9:66:35:2d:84:fb:39:cb:f3:
0e:2f:a4:7d:5a:56:34:38:dc:dd:89:c3:10:e7:56:
b1:b9:0c:22:ff:ea:3d:70:aa:41:24:2a:ad:62:55:
ef:4a:3e:c0:4f:c4:7f:ea:d2:c9:4c:19:cd:4b:f1:
0b:d8:34:3a:72:15:52:1d:c4:0a:dc:77:35:bd:1a:
8b:99:cd:b0:b3:53:c1:b0:ff:9c:b6:03:d0:eb:8b:
93:02:d6:ee:4e:79:e1:b7:8e:f3:5a:80:39:72:c7:
9d:9d:b6:a2:d2:31:68:34:e7:70:da:dd:b7:30:89:
9b:0a:ea:ea:9b:c7:9c:3f:61:07:f2:9a:32:85:95:
ff:5f:83:b9:cf:50:03:d0:ce:fd:fc:8d:0d:34:89:
72:25:e6:a9:58:75:1d:06:27:c2:e0:2e:74:2e:a2:
24:b3:6e:1b:b7:9f:5e:d3:af:d9:5d:4a:53:53:ab:
97:86:9c:c1:e7:5c:9c:e3:6b:47:df:d1:bf:e7:9d:
ca:d8:4f:e7:57:8f:a2:f1:3c:c2:81:64:4b:af:23:
6f:29:db:5e:fb:66:96:24:d2:0d:e2:88:a8:c5:af:
2c:c6:a7:f1:7b:01:c2:78:ce:2e:4b:39:0c:69:7a:
3a:54:39:c3:a8:0a:b2:b2:2a:a5:0d:8f:af:ef:d6:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:AA:B2:04:93:E6:24:31:71:A4:AE:BD:C6:99:7C:3C:5A:33:EB
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:31:c0:df:61:36:c5:ce:66:95:e3:7a:8b:fa:45:4d:e3:
f1:3e:52:bb:ec:07:ff:3e:66:60:69:b4:38:e1:04:4c:f2:f8:
a0:c5:ca:c7:05:d3:3a:d5:11:78:d3:06:b9:9c:66:66:41:91:
7c:24:94:a3:5e:98:1c:22:54:f3:1d:cf:7c:c0:96:3c:95:b3:
aa:00:43:cf:58:45:0d:0f:12:0f:b8:dd:f1:2d:49:67:4d:ed:
ad:b6:06:3e:2a:3d:41:6f:cb:e8:10:74:2a:a3:aa:d7:59:e4:
87:8f:2b:ab:8a:1d:26:fb:1b:33:b6:4d:69:83:0a:08:cd:6e:
02:ff:ed:28:d7:b0:d0:53:e1:3d:82:b4:6f:b4:3e:6e:13:d4:
ec:28:7f:1d:cf:b3:d9:ef:cf:3e:ac:c6:49:d1:6d:7e:6c:98:
24:9c:45:6f:82:17:3c:44:3b:6d:f5:b7:ab:d2:91:20:e7:3b:
33:ac:fb:35:fa:de:cf:72:b0:b0:73:c7:ee:aa:f0:80:0f:10:
a0:c7:cc:23:35:fe:4c:9d:6e:0d:d0:79:d0:5c:56:30:6d:dc:
df:76:81:23:03:92:98:ab:a8:d3:0f:0e:28:d3:49:36:a3:43:
4a:85:31:de:b8:48:ac:53:c7:30:8f:ba:14:d4:c4:b1:74:4d:
93:7f:22:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:45:05 2025 by rpki-client