Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: m5pctQRm7GSvyWHX/xhG+cCKiQjL/lkHkDhC0x6MkQ4=
Subject key identifier: 41:A3:76:75:94:19:07:03:B9:58:16:D7:F1:BC:AE:75:5B:87:58:83
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 0194BD8565B7F3CFAC49A412B6F2C8C5A1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0AE9
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: ihylLal78ED5PrP968Jm3iXjen9hIm1jKsoU2jc/eRM=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:b7:f3:cf:ac:49:a4:12:b6:f2:c8:c5:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=41a3767594190703b95816d7f1bcae755b875883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:8f:c7:28:e7:21:46:6e:54:55:dd:e5:b5:
0a:e3:68:cf:dd:36:4c:c7:06:2f:b7:df:83:dc:52:
e2:4c:1c:bd:e9:bc:8c:c5:9f:26:1f:da:fa:11:64:
93:e4:00:48:ed:d8:51:41:d9:d5:2b:f6:1a:24:d1:
5f:3e:5d:56:c2:05:71:d2:14:b9:f0:d3:1c:5a:e2:
77:7b:02:24:b8:71:90:a5:2e:11:a4:38:2d:78:06:
cf:f8:e2:ad:01:8f:be:8d:e1:fb:91:1e:fb:8d:46:
b2:90:e8:88:e8:8c:8b:40:7b:67:2b:89:c1:25:96:
96:11:ba:ed:12:d6:4d:fc:52:02:63:15:ea:42:74:
77:68:72:66:55:3c:35:1a:b3:57:91:52:49:8d:6d:
49:9a:31:51:7b:77:99:4e:0d:93:49:b2:7e:53:aa:
03:eb:0d:d6:ce:ad:39:6c:b7:20:b5:ef:4f:7c:98:
d0:2b:78:b2:d4:c3:99:a9:21:c6:e5:5a:65:38:04:
03:ed:e4:91:a7:d4:09:55:ca:d8:6b:58:47:48:f6:
a5:79:f6:b2:77:b1:9b:46:67:aa:f2:ab:c8:6e:96:
3e:46:fb:f0:40:bc:4c:d8:19:99:a1:9d:9f:07:2b:
2f:79:10:f1:c5:bb:76:f0:13:e1:48:62:ae:80:58:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:76:75:94:19:07:03:B9:58:16:D7:F1:BC:AE:75:5B:87:58:83
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e2:c9:ea:5e:94:2a:9e:98:8b:0c:02:41:00:41:28:96:54:
84:df:99:7a:b7:53:03:c8:8e:c2:5a:f0:08:f1:f9:3a:38:e5:
ff:f4:3c:1f:7e:2d:b8:54:67:af:bc:ac:c7:2c:12:48:0b:a7:
c7:8d:20:0f:14:0c:2d:c9:2d:97:27:8c:25:11:08:3d:b2:be:
de:e6:82:ca:e4:1e:8e:8c:d9:91:24:6d:eb:20:42:66:98:ca:
d3:01:d2:7d:07:53:92:43:0c:65:a1:ce:57:ee:c4:39:27:5a:
34:82:d4:86:37:1e:6d:36:57:19:6f:80:2a:3c:da:d7:16:93:
06:61:5f:a5:8f:ec:8f:39:18:71:d1:7e:6b:9a:63:35:d9:71:
9f:3d:32:70:e2:1f:32:fc:54:bf:ae:ea:0a:99:52:d1:30:95:
18:32:e8:94:4e:a1:a6:50:4a:44:d3:09:a8:53:7c:13:07:84:
0e:c5:3f:f0:1d:9b:20:26:59:71:d5:74:74:ef:9d:c2:41:f2:
35:a5:5e:72:1d:04:2e:86:0a:1c:16:a0:9e:1b:84:2e:e9:0a:
c7:37:22:b7:b6:7f:4a:3f:e8:d0:5c:4e:6e:c0:8e:a8:70:25:
ae:bd:82:45:36:4e:2f:bf:14:60:1f:ae:ee:d5:0c:e5:c9:6e:
2f:b2:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:34 2025 by rpki-client