Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
File: q9G6riGifK2umCjVKOHXVXoWiXQ.mft (raw, json)
Hash identifier: 9sLABUEyasAr890fWBMeCs86V5Ws8qZ7K4xQlhsmNu0=
Subject key identifier: A1:E0:90:D0:A5:DB:1A:F0:30:88:67:20:7D:46:69:1B:20:42:DA:5C
Authority key identifier: AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
Certificate issuer: /CN=abd1baae21a27cadae9828d528e1d7557a168974
Certificate serial: 0195E158F80589D5CBB65B1AA5AE1E1378DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
Manifest number: 0860
Signing time: Sat 29 Mar 2025 10:00:58 +0000
Manifest this update: Sat 29 Mar 2025 10:00:58 +0000
Manifest next update: Sun 30 Mar 2025 10:00:58 +0000
Files and hashes: 1: 9sqGPYj2kmPhs-twq95bbUkUW9s.roa (hash: +xb7+XiJTwNpBHY8QeifjjhjWqMX+rObx+Ijba3BztE=)
2: q9G6riGifK2umCjVKOHXVXoWiXQ.crl (hash: us37oRw8pIgP24o+1ndIp1OlHNDShzoNJ7i4TzuWQSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:f8:05:89:d5:cb:b6:5b:1a:a5:ae:1e:13:78:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd1baae21a27cadae9828d528e1d7557a168974
Validity
Not Before: Mar 29 10:00:58 2025 GMT
Not After : Mar 30 10:00:58 2025 GMT
Subject: CN=a1e090d0a5db1af0308867207d46691b2042da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:d4:5f:d0:7d:3c:e1:00:c2:2c:19:75:ce:
0d:23:1c:40:d9:07:40:e1:95:e0:42:40:d4:ab:90:
1b:98:c5:2e:4d:29:db:07:7c:e0:7c:b2:fa:58:e5:
67:0f:f9:b9:b6:4a:57:c0:e4:e0:2d:d5:8c:f0:75:
ad:9c:37:a6:4a:1e:56:f2:c0:d9:ac:9b:fd:69:36:
c1:95:e1:85:39:22:9a:9d:f6:57:10:56:50:bc:95:
22:72:c8:a5:6f:bd:e0:ec:e0:f0:f6:49:f0:98:11:
5b:13:08:55:38:5d:58:a1:1c:47:9e:95:3a:a4:39:
15:31:35:14:22:34:34:d1:47:84:c6:09:79:2e:de:
5f:ff:c1:1f:54:e7:26:c0:7f:ba:39:be:db:b7:1f:
ba:07:d8:a4:15:12:9f:77:15:51:af:b6:51:c9:b9:
a0:12:b2:be:ca:6a:bf:45:0a:90:ac:f3:19:09:74:
1c:09:f9:3f:a0:53:cf:02:e3:9c:6a:99:7a:b7:bb:
6c:f1:22:f2:5e:bc:d1:26:ca:03:ad:ee:4d:26:51:
a9:e6:38:00:7a:f4:ba:fe:b5:ed:33:cd:8b:ea:9e:
40:49:f3:6b:97:bf:50:d4:92:09:23:ac:aa:e2:b2:
0b:33:b9:90:e6:62:0e:31:03:8f:90:d4:a9:1b:b0:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:90:D0:A5:DB:1A:F0:30:88:67:20:7D:46:69:1B:20:42:DA:5C
X509v3 Authority Key Identifier:
keyid:AB:D1:BA:AE:21:A2:7C:AD:AE:98:28:D5:28:E1:D7:55:7A:16:89:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9G6riGifK2umCjVKOHXVXoWiXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/375e04-5d9d-45f5-8305-3f69f5ab62cd/1/q9G6riGifK2umCjVKOHXVXoWiXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:47:66:3c:95:9e:a4:6f:db:ea:f2:75:c1:54:0d:b5:40:b3:
59:6c:bd:b8:92:0f:c9:82:09:fd:af:bd:86:de:4b:af:b8:8e:
85:b7:14:b1:bd:37:6e:20:f0:84:d9:15:a0:3f:50:5d:65:d5:
77:97:a4:2c:fb:0f:e2:9d:7d:d1:58:65:b4:3c:eb:1f:13:81:
32:76:4c:74:19:f6:93:56:db:9d:5e:7f:d4:e5:16:44:3f:bd:
3f:9b:22:68:93:98:a3:a4:c1:98:dd:ef:35:a9:09:83:0e:cd:
df:13:3e:b0:d1:aa:13:23:38:64:01:84:01:81:f1:c3:98:63:
45:51:01:1a:37:19:e0:1a:6e:fc:c4:38:89:c7:ac:ec:34:d6:
4c:89:8e:a3:ec:61:e3:e5:38:69:4f:b9:09:70:aa:ca:db:53:
23:b7:47:b7:9a:a4:a2:f6:cd:28:f5:a1:d8:ca:e1:3a:00:de:
86:fc:1c:5c:c5:b4:f7:03:9c:f3:69:c7:8c:b0:a3:22:87:f4:
c5:9f:51:33:fa:8e:b9:a4:98:43:82:18:66:a1:ed:41:2e:60:
1f:2b:5a:c9:39:31:2a:d1:37:03:44:28:46:27:00:0b:81:05:
c7:e5:d4:4a:65:7d:33:c7:73:52:72:1b:00:ad:0a:9b:dc:2c:
75:75:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:16 2025 by rpki-client