Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: jiMMsfyML1Fp7JLBuIGc+669ntjQOorOMhFRH2oRxtg=
Subject key identifier: 6B:AC:2F:72:6B:B7:92:47:B2:84:B8:FA:85:AF:2E:76:3F:2C:D2:04
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0194BC04EBCD1AF78E5D291D1EA91D393988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: nPGVEiktGN2mNCr1aq+PpfAfULtD9bI2vg64Gcgx8fI=)
2: htodApNLGhLpFMruOMlntyiGeOc.roa (hash: cFfgGJzFfvTMD4F+KAnyyiaMBsfRll7IR2YZJcMoxkc=)
3: wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa (hash: kbPsqoJze+tNEJsbFqXpAiz/ui3VxFgmLT6No+U36XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:eb:cd:1a:f7:8e:5d:29:1d:1e:a9:1d:39:39:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=6bac2f726bb79247b284b8fa85af2e763f2cd204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:1d:b9:fe:30:cb:ed:a9:ae:87:6a:e3:ab:
c1:da:3c:9f:31:42:35:d6:03:e7:27:ea:a1:9b:c0:
4e:9e:02:8b:bd:44:f8:53:21:3d:a2:93:11:c9:fb:
61:02:65:a8:05:d3:28:a4:85:ed:86:5e:59:01:07:
0d:27:4c:fa:c6:81:05:a9:d4:51:ff:d6:a6:dd:de:
d8:f1:2c:6f:4d:58:8c:c9:7b:90:ee:6f:6f:d5:41:
7f:47:3e:bb:fa:98:40:67:fd:80:10:a1:1e:59:84:
67:53:e0:ec:22:51:be:4a:2c:5f:18:0b:00:29:cf:
9f:dc:35:a3:ce:33:98:76:3c:3e:1f:f5:8a:85:58:
13:2c:f0:53:b6:1c:ca:89:f7:7e:fe:01:41:77:61:
81:10:64:e6:fb:b9:81:c5:0a:5b:bd:85:92:ab:c7:
15:1a:e8:98:49:47:14:22:d3:29:63:f4:f5:f9:36:
54:a5:2c:50:b5:7e:54:13:2d:93:29:8d:ff:e5:79:
f2:12:62:30:2e:16:b8:be:85:82:2e:18:89:42:af:
a6:03:08:36:08:57:a8:c0:98:19:56:58:9e:e9:0c:
7a:f0:bd:ce:7a:5e:13:ad:65:7a:f4:7d:6f:19:8e:
2d:9f:e3:bd:a3:d5:45:81:80:23:a3:df:b9:55:9f:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:2F:72:6B:B7:92:47:B2:84:B8:FA:85:AF:2E:76:3F:2C:D2:04
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:d3:e0:ff:11:03:19:ca:37:7a:52:a9:36:e2:ab:0c:d0:
83:ae:ee:ef:4c:c0:dd:39:5a:cc:55:05:50:46:a2:d1:e1:9c:
75:0d:30:91:fe:89:0d:c3:f2:f6:49:b3:43:8e:3f:c0:e7:15:
73:c4:86:21:f2:57:71:a0:fe:79:b1:5c:90:76:27:a9:cd:3e:
cb:b5:ca:60:1b:cd:f6:37:64:0e:5f:44:14:9a:7f:ab:ac:8b:
b5:62:9f:99:91:93:d7:91:fe:6e:28:6a:c3:c5:77:e9:7e:62:
fa:15:dc:99:76:f1:ed:d7:20:06:ab:80:6c:19:bc:fd:7d:c9:
d8:56:81:b5:2a:c3:f1:2e:3a:76:1f:8f:28:df:f4:88:b7:5c:
e8:dd:98:04:59:23:82:52:8b:75:da:ea:60:c0:92:60:a8:56:
de:80:7e:0f:65:33:a1:6c:07:0b:60:74:1d:51:21:aa:8e:e6:
32:0f:85:5c:d8:2f:00:79:e3:a2:96:0c:24:4d:4c:48:1e:4f:
2a:f2:0d:6a:84:53:75:f4:58:d2:a1:35:73:ea:83:5a:92:de:
35:d7:99:55:4b:90:39:1c:48:e1:dc:70:6d:5c:f5:d2:1f:fe:
44:0a:21:4f:cb:bf:b8:df:e9:ff:16:c1:cc:5b:ee:8e:f2:e5:
ed:00:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:17 2025 by rpki-client