
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: Q1W4Ia9tgY83EKjTKj7MnEjTlN7d10SEOnSuL728/xo=
Subject key identifier: 7C:73:09:EC:8C:11:AA:42:B5:1A:C9:89:78:0C:5B:A7:80:B0:94:9B
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01962E9865F78637593B216AAEDE748BB510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 147C
Signing time: Sun 13 Apr 2025 10:01:01 +0000
Manifest this update: Sun 13 Apr 2025 10:01:01 +0000
Manifest next update: Mon 14 Apr 2025 10:01:01 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: jOE4i5GmNTw+E5NqiJazx57CcX4JjlkisLEKNeG48B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:65:f7:86:37:59:3b:21:6a:ae:de:74:8b:b5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Apr 13 10:01:01 2025 GMT
Not After : Apr 14 10:01:01 2025 GMT
Subject: CN=7c7309ec8c11aa42b51ac989780c5ba780b0949b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:fe:86:97:bf:09:3f:5d:6a:3b:35:81:6f:
fa:48:25:35:55:2f:1c:f1:04:ab:0d:53:cd:da:6d:
86:9c:3d:c4:ea:43:16:b3:4d:98:fd:67:ce:5a:dc:
76:f8:2e:f3:a4:7b:2f:4d:07:09:0f:79:6e:35:dc:
4b:79:e2:13:84:63:27:08:d4:2b:27:2b:93:64:45:
3c:31:db:7c:f2:f0:d0:03:c2:e8:a2:7a:74:b5:92:
a0:6f:38:92:a6:07:31:82:ef:6e:7c:ea:c8:36:24:
16:2e:3c:9b:ec:d0:06:5f:01:51:15:23:d0:53:bd:
36:b5:c3:3b:be:a6:7e:a1:e8:1e:f9:bb:20:f7:6f:
fd:79:cc:43:14:38:ec:81:8e:b4:1c:22:a5:7e:a2:
9a:1a:06:8a:af:11:84:7b:95:a9:71:66:ad:fa:55:
5f:b4:6e:91:fd:39:5e:7a:ee:07:43:a7:0f:94:29:
10:28:27:6e:0e:7a:44:d5:3b:12:16:28:9a:41:a4:
c3:8b:e6:dc:9d:f1:af:3c:93:c5:3d:ff:2b:7e:8a:
4e:62:1c:4a:41:2d:1e:2a:cf:3a:88:d4:80:46:ed:
84:c8:8c:47:56:fd:14:58:af:a7:ad:f9:d4:9f:99:
20:2a:06:fe:d7:a4:aa:f2:4c:2d:96:9f:47:e5:40:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:73:09:EC:8C:11:AA:42:B5:1A:C9:89:78:0C:5B:A7:80:B0:94:9B
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f1:1a:79:34:28:95:f4:3f:fa:c2:a4:48:2f:57:41:61:46:
c5:50:6f:fd:5d:35:48:30:b9:be:c7:80:7b:3c:f4:1e:06:0c:
f3:ac:fc:21:5b:c7:af:2c:be:22:9a:fe:74:7d:e7:43:3b:8b:
6c:21:7e:3d:8c:33:dc:64:9e:b5:81:48:c6:82:1c:17:5f:f4:
a9:30:9b:1c:d0:23:ec:14:c8:e7:83:88:38:d4:f5:af:7b:39:
50:70:23:5e:d9:8f:36:bc:0d:06:53:6e:d6:68:7e:a2:42:f2:
42:f9:5b:0e:5b:c1:84:bf:d6:8d:ec:69:e1:cb:e2:61:3a:ee:
1b:89:e6:8d:8e:1c:58:e4:17:f7:90:e7:68:46:3a:4d:7d:cb:
bc:64:b7:9c:34:85:5c:d0:0a:72:5e:8f:38:a5:48:2d:1a:04:
fe:a3:5d:e1:28:15:02:ea:86:ba:01:a4:9c:cd:ad:4c:87:fc:
2a:25:6e:e8:d4:8a:18:11:a4:92:f0:0e:67:0c:9d:fc:89:64:
8d:7d:0f:e2:e6:7b:50:a8:b1:bf:ac:a4:58:bd:08:c6:aa:cb:
19:84:c3:4e:84:88:85:aa:e9:90:75:44:fe:7b:c8:ee:8a:2b:
27:ac:67:f8:f9:38:d6:5f:89:05:ce:9e:7f:f0:e3:aa:35:85:
14:28:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net