Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
File: q9G6riGifK2umCjVKOHXVXoWiXQ.mft (raw, json)
Hash identifier: +9DktcquJrsxsZTiJ5QsEiRAgYbr2Zxa7iMzCJHRekw=
Subject key identifier: FB:4D:53:14:40:1E:27:FA:87:59:42:E1:9A:30:0A:60:4F:B4:66:3B
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 01961F25610E0310E37D748A7A30AF87F5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
Manifest number: 0880
Signing time: Thu 10 Apr 2025 10:01:05 +0000
Manifest this update: Thu 10 Apr 2025 10:01:05 +0000
Manifest next update: Fri 11 Apr 2025 10:01:05 +0000
Files and hashes: 1: 9sqGPYj2kmPhs-twq95bbUkUW9s.roa (hash: +xb7+XiJTwNpBHY8QeifjjhjWqMX+rObx+Ijba3BztE=)
2: q9G6riGifK2umCjVKOHXVXoWiXQ.crl (hash: SAaI05PDpuQhY+QXjzJuStqRVWbggjrw0sKDDqdToro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:25:61:0e:03:10:e3:7d:74:8a:7a:30:af:87:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Apr 10 10:01:05 2025 GMT
Not After : Apr 11 10:01:05 2025 GMT
Subject: CN=fb4d5314401e27fa875942e19a300a604fb4663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:af:98:80:c6:37:09:be:d5:bf:bf:32:1d:
6b:2f:26:28:91:01:e9:72:1a:a6:e9:8c:ad:ae:bc:
1b:61:bc:cd:fb:7e:8c:71:f3:98:aa:db:cb:e8:04:
07:5f:5c:71:31:60:f1:e6:77:ce:3a:44:e2:2a:d0:
19:e8:e4:ab:54:62:76:5c:58:41:aa:5d:80:73:54:
79:9e:94:fb:85:bd:66:4a:56:ad:b8:97:57:fb:1d:
a8:e2:e7:eb:bd:07:09:ab:2b:04:f9:32:f7:c7:4e:
61:6e:a1:61:6d:56:3a:e9:10:af:4d:4a:cc:35:bc:
69:d9:f9:f4:0e:9e:7c:47:9c:b2:88:da:11:89:74:
43:d5:d6:fd:0e:f8:78:5b:a2:82:d5:28:a8:2f:82:
5e:dd:07:1f:54:6e:7a:25:26:f4:0f:3e:79:1a:6c:
04:6d:9e:81:37:14:b2:8d:3f:46:26:28:8e:87:4a:
64:f5:c9:93:d3:b1:99:41:c9:79:56:d0:58:5a:4f:
43:5c:43:86:f5:d2:f7:38:52:e5:26:8e:24:3f:32:
1e:e6:69:3c:1b:f3:2b:bc:56:c9:01:c0:0c:22:47:
5e:20:9b:11:a8:3c:7c:94:14:69:50:1b:99:70:e0:
80:78:48:2e:09:08:55:cb:c6:48:94:2f:cc:81:6d:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:53:14:40:1E:27:FA:87:59:42:E1:9A:30:0A:60:4F:B4:66:3B
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:e3:01:f2:ff:5c:5e:1a:dc:03:7b:aa:c8:16:d7:aa:2f:
36:4e:50:26:b7:14:32:cf:cb:2b:8d:00:f5:c8:ee:c2:c7:dd:
d0:26:ed:42:b9:78:e4:d5:5c:70:da:1e:df:f3:6a:c0:30:72:
41:58:d2:56:af:d5:8d:8b:84:70:93:ed:92:ca:88:b4:f7:bd:
0f:d8:21:86:bb:67:22:75:f3:bc:7d:ea:38:62:d3:9f:16:53:
b9:93:72:e5:21:ec:9e:2c:b6:fa:98:90:3a:21:b4:76:5c:a5:
0f:01:d8:07:8c:32:ec:92:67:6c:51:b0:1c:e9:22:da:70:c6:
2a:32:55:fe:07:ce:a8:2e:18:bf:25:af:74:f4:06:5b:15:0d:
20:10:57:10:ee:3d:98:c4:fd:7d:e9:92:9a:4f:62:8a:6b:a9:
8f:0a:6e:c2:cc:6c:48:cd:2f:dd:e8:68:56:d5:2d:fd:3e:c7:
59:59:59:81:b5:68:8b:11:6b:fc:a2:19:c3:83:1e:b7:de:f6:
e3:03:30:ce:18:97:f8:4a:f7:31:7a:d1:bb:21:81:be:92:de:
b6:98:a2:78:10:da:ad:ca:44:07:88:2e:2f:ba:fb:80:d1:c7:
2f:61:85:64:9d:93:25:5a:fc:ae:c0:1e:46:61:5e:f8:a2:68:
24:1d:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:14 2025 by rpki-client