Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: c1P2WdY2fAGOkijfmZcXVxyA6v8WtuQaN9ybgvVjGYU=
Subject key identifier: EF:25:BE:78:A4:F5:3A:B5:D6:F2:48:19:3A:6B:90:CE:23:E3:DA:8A
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0195E15984481BA6A0FDD6923FDFCFC8824D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 057F
Signing time: Sat 29 Mar 2025 10:01:34 +0000
Manifest this update: Sat 29 Mar 2025 10:01:34 +0000
Manifest next update: Sun 30 Mar 2025 10:01:34 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: 4emXZpfej8HHcugJgm7nlKcWoJhX7P7PjZMsOcIvyr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:84:48:1b:a6:a0:fd:d6:92:3f:df:cf:c8:82:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Mar 29 10:01:34 2025 GMT
Not After : Mar 30 10:01:34 2025 GMT
Subject: CN=ef25be78a4f53ab5d6f248193a6b90ce23e3da8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:e6:7e:29:d8:36:b6:0c:44:b0:08:86:eb:
7a:2a:30:69:ae:3d:fc:7c:e4:8e:b2:b0:03:6b:10:
17:e6:a8:3f:cc:bf:a2:f3:02:b4:0c:4e:ae:4b:aa:
4b:19:02:5a:3b:55:2e:18:72:5a:35:5c:71:7c:21:
12:e2:5f:e0:de:e1:1b:0c:54:d6:48:47:20:d8:59:
f1:bd:bc:ed:a6:46:93:54:45:f2:7b:ab:3b:6b:ac:
ab:be:9d:55:10:e3:97:49:d5:06:c1:3d:8e:98:02:
69:49:1e:bf:8e:8e:ca:c2:01:67:12:a2:64:8f:a2:
a3:35:d8:d1:e9:e5:ac:8b:64:dd:51:a9:83:3f:4d:
ed:ed:5d:5c:bf:3c:97:2f:f0:1e:12:fd:68:bb:d0:
cf:00:cd:54:da:03:4a:8a:cc:9f:c3:a1:d5:28:e7:
1e:13:e4:a1:68:cb:60:53:85:35:6d:3f:84:fa:d1:
6f:3f:1a:77:cc:c2:14:7e:3d:ec:ec:05:a6:00:9a:
cc:50:a0:40:eb:d1:19:15:94:b0:f2:70:0f:87:24:
80:00:75:47:7d:cc:59:f7:35:73:7c:78:ed:71:ff:
4d:40:5f:4e:84:26:60:83:f7:ef:72:43:e8:a9:07:
e9:da:02:58:f3:ef:49:60:a4:b2:5f:d4:6a:32:db:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:BE:78:A4:F5:3A:B5:D6:F2:48:19:3A:6B:90:CE:23:E3:DA:8A
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:76:2f:a8:4e:c1:38:2f:40:9b:e3:14:69:ae:80:f8:91:38:
28:2c:ca:86:f4:04:65:5a:ca:00:71:02:0d:0f:8c:25:0c:c7:
6f:3a:a3:b4:c5:ab:2e:04:a6:14:88:bf:ac:93:42:4e:52:7c:
d7:c3:16:27:7f:f2:92:3a:22:66:01:b3:df:0e:26:0b:95:b2:
86:8b:ce:79:bf:8e:bc:11:1a:42:b0:f9:b0:38:a5:42:b6:08:
9d:1e:65:74:42:07:4d:2b:1e:ab:07:38:84:ef:7b:f8:b8:28:
d8:58:ec:db:70:3d:33:ff:ae:62:ac:2f:b4:91:7f:b4:c7:fc:
b9:e2:ac:c4:af:78:3a:ed:b8:6e:5a:fe:ea:84:f1:c7:a3:9f:
a7:44:8c:9c:62:3e:6e:fb:d6:2d:4a:e9:a0:e5:c5:61:a4:b1:
55:6f:db:b4:28:84:00:09:7a:13:cf:4b:7f:4b:d8:d3:ba:28:
28:e2:43:07:47:65:e9:5d:38:68:c7:36:eb:df:e0:07:61:ce:
8d:0a:1a:dc:3a:2f:c1:00:24:fa:15:dc:b3:50:4b:d6:e1:19:
1a:12:c3:45:55:7b:2b:a8:51:66:e9:4a:c2:89:f4:ea:ca:ef:
3b:5a:4b:df:a4:a4:ef:28:69:f4:02:24:8a:3e:e8:d3:5a:7f:
83:53:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:44 2025 by rpki-client