Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: tgaQ84aMb93VjbWhfbPVn12R5yUwvHNsz86Q4jVK4tI=
Subject key identifier: 6F:BE:1D:1D:5C:D5:07:50:D3:32:26:B9:C8:0F:00:D3:75:31:85:11
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 0194BD17DA0F112C9538CE258FADAF039CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0826
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: DWY3b0KHw1O+ySxIkP3prbBEuCZiRBxdBGUbZg60MeE=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:da:0f:11:2c:95:38:ce:25:8f:ad:af:03:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=6fbe1d1d5cd50750d33226b9c80f00d375318511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:ff:b0:07:7e:62:b8:2f:b7:25:ae:37:e0:
01:16:a4:53:04:9d:13:be:92:0b:a9:20:fe:78:1d:
fd:c5:d7:99:64:e7:2d:6d:a3:3a:e6:31:fc:b3:41:
03:29:57:21:c9:9c:aa:b8:a8:81:f5:5a:8b:24:e8:
5a:b9:e2:f5:2d:fb:b3:c0:7c:25:c2:f8:1f:db:c2:
e1:79:51:2a:5d:67:56:46:b6:9b:9c:be:f8:c3:92:
38:e3:3f:38:33:93:73:34:92:f4:74:e1:2c:9a:64:
98:00:52:9c:9b:82:49:f4:86:96:d9:65:64:27:74:
cc:39:f8:d0:f2:6e:86:7d:6d:73:50:8c:d7:d7:89:
4a:32:cd:0a:33:62:8e:38:fb:eb:4c:81:0f:26:4f:
7d:ee:56:9b:2d:4e:1f:45:2b:ed:fd:dd:46:3d:f2:
3b:f9:75:a7:b5:67:07:1a:78:5d:f4:fb:9a:54:a6:
0c:41:5c:58:bc:b5:08:72:a6:85:21:6c:34:a5:fd:
04:33:d7:cc:9b:c3:63:8b:b4:f2:36:6c:1a:3c:31:
69:72:53:a3:33:80:6d:4a:d8:aa:2c:cd:a5:cb:3c:
bd:91:bb:02:df:52:0f:a6:cd:63:3d:b1:ab:b1:62:
e4:6a:3f:a3:55:bc:eb:f0:49:60:9b:85:48:7e:77:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BE:1D:1D:5C:D5:07:50:D3:32:26:B9:C8:0F:00:D3:75:31:85:11
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:50:81:a4:f3:95:a0:17:b4:60:89:5d:71:42:b1:73:59:
a7:32:83:44:25:e1:63:b9:cf:4c:21:c1:ad:fb:fb:53:3c:d9:
d3:ea:5e:0e:85:dc:58:5a:0b:80:f1:a2:19:27:f9:dd:cd:37:
f6:b6:b2:0c:b3:b0:d0:a9:85:ef:aa:f5:c9:70:8c:33:a2:76:
9b:ad:72:f8:e6:4f:db:0d:87:10:a1:bd:35:ac:6c:ad:76:47:
ba:a6:60:ce:87:18:d9:ce:77:d2:2c:47:cb:0d:ad:e0:03:ad:
60:a6:fa:ae:fb:f2:ff:5f:92:3f:b2:f2:83:c2:b7:8b:3f:9e:
59:11:1d:d9:c1:82:7e:ef:b7:bf:3f:d7:15:91:14:ce:4e:3a:
d6:0a:12:7c:60:0f:79:3e:8c:e0:5a:72:fc:d1:1d:d4:1b:21:
5b:59:11:75:e3:e2:ba:3f:82:99:3b:50:ce:d7:6a:58:1a:e7:
8b:48:75:47:4a:33:19:71:e5:ff:e7:fc:92:31:38:1c:11:9b:
b1:bd:ff:5e:d2:33:19:c8:00:44:e3:d2:09:a0:b4:9b:14:c1:
f3:cf:2c:3a:1d:da:66:82:53:57:44:b1:40:d6:7e:b4:dd:07:
70:30:ad:fc:17:29:2e:2d:8b:ee:fd:c2:10:03:8a:23:6e:2b:
da:c0:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:30 2025 by rpki-client