Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
File: tq5hgU9xUMm4EX9JjKuU23KoM5w.mft (raw, json)
Hash identifier: zQaLyLi5r8dv7Zt5mNmQ6mtFynAXPp8WP8L1nlbo68k=
Subject key identifier: 70:04:9C:0A:43:67:BC:58:C5:E6:E3:FA:A3:70:FD:7F:9E:DB:62:C1
Authority key identifier: B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
Certificate issuer: /CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Certificate serial: 0193F2BF17A4E2CB4C3E88DC063759EC9D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
Manifest number: 0AA8
Signing time: Mon 23 Dec 2024 09:00:29 +0000
Manifest this update: Mon 23 Dec 2024 09:00:29 +0000
Manifest next update: Tue 24 Dec 2024 09:00:29 +0000
Files and hashes: 1: UrIC9K77bsZJrGkrV12-HUzS4cc.roa (hash: NnslkIJLLH4TyF9j/7kNuwdptL4oEpIbbkFU2TOwHks=)
2: Vd-eFipTUvLOALBRAAOJ26QoTTk.roa (hash: XbE/rePIDpGaEwt/aYSv8okh7wq+otPo2aJZ2uYvDxI=)
3: tq5hgU9xUMm4EX9JjKuU23KoM5w.crl (hash: YQi4MacntecB3GnspT/vQt/7B9dxoqHFJeHb/bJqn/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:bf:17:a4:e2:cb:4c:3e:88:dc:06:37:59:ec:9d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ae61814f7150c9b8117f498cab94db72a8339c
Validity
Not Before: Dec 23 09:00:29 2024 GMT
Not After : Dec 24 09:00:29 2024 GMT
Subject: CN=70049c0a4367bc58c5e6e3faa370fd7f9edb62c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:61:68:eb:ca:1a:63:09:ec:e4:52:61:04:
16:6d:92:a3:65:c7:8a:95:85:b2:a2:8d:c1:aa:67:
76:70:21:7f:c4:57:45:0a:f1:40:2e:05:41:79:a3:
7f:3a:65:20:19:96:a1:05:ca:22:97:6e:dd:ef:1f:
bb:1c:92:98:ab:b6:5b:e9:0f:50:21:8c:11:10:ad:
4e:d1:fb:75:c7:30:5e:89:51:67:29:5d:52:94:b6:
dc:26:34:9b:26:4d:70:d5:10:5e:c4:a9:ca:4b:0f:
de:c0:3b:92:4b:cc:69:4a:d8:72:4a:8e:1d:2e:5a:
25:ba:46:0a:e2:98:d6:8c:6a:13:b3:29:cf:29:61:
71:3f:f1:ee:e1:6f:5e:2c:36:54:e9:e2:6c:ba:6f:
c9:eb:94:f7:f2:1c:40:68:7d:c4:e2:95:5f:b2:bb:
45:5f:e8:c7:6a:01:41:49:2f:d5:0c:0a:3b:22:44:
d6:4d:df:fa:df:f8:85:15:ac:f7:54:03:e9:64:a9:
51:f8:55:60:73:a5:c8:e3:c2:1c:a2:cc:4a:24:02:
94:7b:0c:5c:d4:52:e7:a2:da:3a:63:bb:1a:26:90:
77:35:a6:38:f4:a7:b0:0b:b0:dd:d3:14:6f:57:d2:
80:ac:b8:e7:1f:82:c0:09:36:6b:26:05:3f:05:6a:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:9C:0A:43:67:BC:58:C5:E6:E3:FA:A3:70:FD:7F:9E:DB:62:C1
X509v3 Authority Key Identifier:
keyid:B6:AE:61:81:4F:71:50:C9:B8:11:7F:49:8C:AB:94:DB:72:A8:33:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tq5hgU9xUMm4EX9JjKuU23KoM5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9de8b0-6cc5-458b-b23e-16e10d72b567/1/tq5hgU9xUMm4EX9JjKuU23KoM5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:5f:d3:c6:0a:87:a9:06:1c:f0:40:8c:09:b9:ab:c4:80:
6b:14:b6:2a:69:fd:bc:35:34:bf:47:a6:2c:ba:ba:00:da:e2:
a8:df:d0:fa:37:90:b4:83:d4:ff:91:67:07:62:8f:cd:c7:72:
33:be:d6:31:ec:37:fb:ba:5f:47:aa:e5:58:4f:e9:da:b9:c2:
91:ca:e1:15:e0:22:b0:78:90:80:20:fe:91:c1:0f:93:bf:d5:
86:46:65:22:08:b6:a2:ab:46:8b:af:82:96:e6:be:37:dc:86:
92:5e:fb:ad:27:83:e0:a8:c5:1d:44:42:74:72:fb:21:3c:68:
df:4c:4f:ca:08:3a:3e:7d:19:e0:44:a3:06:6b:85:d3:10:8d:
a1:35:fe:61:a2:2d:a5:fb:e2:a0:6e:2a:2d:9f:cd:7c:92:57:
52:1e:96:11:fe:b7:29:6b:bc:ef:ba:55:c9:3e:ce:05:81:af:
52:32:7e:2a:ec:3a:ad:a5:74:41:a4:c0:99:8e:db:ad:c4:e4:
7b:2b:85:84:1d:c9:b9:ef:ef:1d:45:71:3c:3c:e4:9f:9d:7c:
44:e2:d5:de:57:1a:d3:e7:3c:c9:2d:09:f5:90:fb:c4:8a:2d:
3c:47:8f:87:0a:f0:9c:8a:8e:2d:17:7c:64:06:17:1c:31:4a:
7a:64:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:21 2025 by rpki-client