Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: NxK8egvixu6srver8HSLBLDTYk0ZrBTuX3W50ZlaN7Y=
Subject key identifier: 22:BB:42:16:F5:72:A6:B5:50:7B:34:E4:F0:F1:95:E0:D8:AA:A0:C5
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 0194BC3C975B281A25C5B80CA2B7BE525E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 0F28
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: GNK7L9X+ywPZ0N6UHyEJw/+ehJh1bN3OVhlC/Z+1pO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:97:5b:28:1a:25:c5:b8:0c:a2:b7:be:52:5e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=22bb4216f572a6b5507b34e4f0f195e0d8aaa0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:51:b9:c7:35:7a:90:ef:26:4c:5b:a3:d4:
85:70:78:2a:11:4d:2e:22:62:91:cf:e5:5e:47:48:
8a:c0:cd:82:d7:57:95:a1:5a:25:5e:32:89:ce:6e:
d8:ef:7b:7d:a1:6d:68:55:56:a9:90:83:02:3b:5f:
a5:79:c5:41:8d:33:eb:ab:9f:74:f0:6a:95:50:82:
2d:b3:e2:0a:f6:d6:02:d5:73:8a:f5:3b:3b:0c:2e:
60:1d:8a:ee:4d:cf:87:e5:df:96:85:a7:d9:c0:63:
f7:f6:3d:76:36:37:83:58:9a:3d:69:5c:32:67:f6:
4e:ba:8b:50:a3:b2:6e:0e:8b:51:31:51:81:c3:17:
41:f5:2b:9b:fe:8b:48:d7:75:2c:00:61:8b:e4:73:
68:6f:51:15:6e:82:68:28:bf:1b:6c:b1:57:1f:7d:
fc:b6:f2:32:af:65:1b:e7:3b:75:23:c6:d4:fb:af:
18:b7:24:09:df:49:ad:5c:59:cd:58:9b:05:16:19:
83:ab:1e:a0:d0:f4:c1:ab:6e:c9:75:18:89:34:89:
02:e2:0c:8c:d2:cf:66:d6:3f:3d:56:7b:5b:c9:56:
0e:12:af:ca:74:db:03:e5:2f:b9:88:98:89:26:44:
a5:cd:a8:f6:cf:bd:e1:a8:06:29:60:52:9b:75:2a:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:42:16:F5:72:A6:B5:50:7B:34:E4:F0:F1:95:E0:D8:AA:A0:C5
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c6:af:50:fe:25:2b:6b:15:c8:50:9a:be:2d:48:46:1c:44:
ca:b7:94:af:41:4a:ce:47:6c:46:26:fd:ca:96:9d:98:a9:3f:
e6:a0:ea:ad:bb:e3:ed:a7:71:73:aa:12:42:ce:52:47:82:88:
3a:01:04:21:5b:8f:70:b2:da:34:50:4a:e0:ad:90:fc:3c:4c:
71:a9:1b:50:f3:d9:c7:98:a2:94:c8:1e:3e:72:36:5c:4e:f1:
c8:fa:03:88:d9:ae:89:e5:5f:24:5c:5a:e6:9a:92:33:c9:9e:
4d:1a:de:e8:6b:2b:2c:5f:d7:7e:58:0a:bf:44:3c:f3:61:d5:
79:3b:89:00:73:fb:26:bc:d9:42:a1:3f:f7:49:b3:5b:ca:4f:
04:87:53:2f:f2:6b:c0:26:3b:27:7c:3e:28:5f:a2:0e:77:cc:
03:96:7c:c4:f1:92:ad:f2:cb:47:50:72:ff:a8:68:38:83:2a:
92:38:81:f6:0f:b4:04:1c:f8:28:3b:22:50:8d:9f:26:71:58:
76:40:53:91:c9:ec:3b:68:9d:ec:b3:38:5a:58:4c:cd:e6:14:
93:96:ea:aa:d8:fb:ef:48:b5:85:ab:a4:93:7d:cb:22:54:37:
4e:0e:b4:3d:4c:65:19:8a:d4:d0:6f:75:61:7b:ea:ab:3b:93:
00:77:5d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:28:03 2025 by rpki-client