Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: VN5jCswbluHyjvdCo1zuFW0A7rB31P/cFkvyY7EPKFw=
Subject key identifier: BD:DA:ED:15:DF:D2:58:68:BC:AE:08:6F:9E:84:8B:B2:CD:4F:29:E7
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0194BCE0D9C37904AF2CFAE9B002AE5AC174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: ZJ1pkOmsuYBWeF29UVG5PYZyv9Y8S3dXavw04MIOO08=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d9:c3:79:04:af:2c:fa:e9:b0:02:ae:5a:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=bddaed15dfd25868bcae086f9e848bb2cd4f29e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:d7:2b:13:ee:db:68:b6:45:8c:c6:7d:94:
b1:77:de:9a:2a:63:e4:4e:aa:9d:4d:75:8f:33:7f:
d4:d2:c7:b9:58:e3:e3:7b:38:d8:ca:5f:bc:a8:4f:
79:35:73:79:48:c1:1a:79:35:06:af:09:a9:b4:c8:
1d:3a:9c:d9:02:b5:8c:b1:5c:b4:d3:4b:27:9a:61:
c2:fc:1a:a9:53:00:5b:50:54:e7:43:71:1c:bc:2f:
8e:a0:a5:8e:8f:02:97:25:3c:f2:61:fb:3f:e3:ec:
52:72:1e:8c:db:6b:20:14:7b:63:5b:93:6f:5d:fc:
5c:c4:51:02:b7:67:3a:98:08:ee:cb:fa:03:4f:e3:
16:2e:70:8c:8d:d9:22:d2:17:cc:e4:1e:ba:25:7f:
3b:95:73:ee:b3:b4:c7:71:81:1b:a4:eb:3d:ad:a5:
ca:4d:57:cf:ba:cb:69:8a:60:54:1e:67:02:0c:10:
17:2a:89:a6:c1:86:1b:f9:6c:e9:72:8b:e7:23:af:
13:2f:a8:ad:9e:a2:15:51:b1:88:61:0f:69:81:92:
90:94:15:5b:fe:8e:4c:90:a2:81:1d:cb:9e:96:eb:
da:11:52:a0:da:e9:bd:a1:02:06:45:f5:0c:0c:33:
b9:c4:ad:59:f9:69:54:ae:0e:cc:2d:58:a1:29:f9:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:ED:15:DF:D2:58:68:BC:AE:08:6F:9E:84:8B:B2:CD:4F:29:E7
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d2:92:d1:bf:40:d1:e9:1b:55:4e:68:59:b9:20:9b:81:61:
b9:65:7b:d8:d2:88:50:c2:5e:dc:d3:c1:59:66:7c:78:c1:68:
8d:37:1c:ed:37:89:4e:6c:ab:8c:47:d9:9a:1a:90:71:07:74:
8f:c7:ec:84:cd:e9:e3:ed:f6:22:b1:06:2b:b7:da:da:69:af:
88:f6:36:7c:b5:7c:7f:d7:fa:62:76:b9:30:bc:d3:3c:63:0a:
4b:04:66:39:85:b3:2c:21:b5:95:12:98:d3:90:54:78:59:ba:
3b:55:5d:42:e2:8b:31:49:ef:53:6c:60:e9:2d:d7:a2:b4:e0:
17:90:e2:74:c8:f5:fd:c3:1b:78:09:99:e1:53:f2:9e:9f:fd:
1b:a7:73:84:3b:ef:16:6f:70:60:83:c1:54:eb:d1:df:48:b9:
e4:49:42:a1:96:cc:0d:52:ae:cf:d7:6f:67:0f:04:c1:c2:2b:
95:88:56:b4:fe:06:d8:fd:8c:ae:33:df:16:c8:80:ad:71:46:
67:c2:a7:ea:84:e5:fe:1f:c9:e3:dd:a1:60:9d:f4:41:4d:3b:
0f:f8:5f:0f:48:1c:07:7b:f5:9d:68:0c:67:2f:8c:80:ab:8c:
32:27:e6:04:73:23:76:26:db:1c:e4:b5:f3:38:5e:6a:f1:9b:
fc:ec:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client