Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: iG8ngBIX2GfuYSgudvHtwf7cxkCrK5f9dfRFpXbw2E8=
Subject key identifier: C0:1C:35:D1:2C:58:49:E3:36:DF:34:01:3E:D7:C9:E9:52:AA:ED:CA
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 0194BBCE2BFE2EE4BC464CDDD5D3B1C8548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 2nq8baCqcb6Qm0GGILnvHmLxnErTaFD70VNNzf/IFT0=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2b:fe:2e:e4:bc:46:4c:dd:d5:d3:b1:c8:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=c01c35d12c5849e336df34013ed7c9e952aaedca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:01:64:c8:0f:ed:99:5a:9c:39:56:73:d4:
97:73:75:f1:9c:72:a2:4d:37:f8:47:6d:fa:88:c5:
ed:71:ce:2b:12:57:6d:55:fc:27:82:8b:f5:da:d0:
a1:37:8e:38:dd:29:25:4a:00:1e:09:4c:8a:17:90:
ac:3e:6d:d6:3d:d5:c0:49:0c:e8:70:11:6e:40:58:
e3:a5:27:0d:11:fd:90:fb:6a:9c:88:3b:c5:a5:1f:
75:9f:aa:31:e3:37:97:a7:d1:cc:82:1b:e4:dd:c8:
a2:f8:a5:5a:13:3c:4a:56:1e:ed:02:61:ed:6d:1c:
bb:26:82:1e:98:46:ae:80:7b:63:2b:aa:19:19:33:
a1:8a:5d:bb:5f:61:14:5f:44:1c:66:35:a7:a1:d5:
19:de:1f:89:02:9b:de:02:3e:ed:8f:82:c1:13:10:
7c:7e:a3:98:8b:8d:cf:12:c4:cb:da:55:d5:cd:90:
f4:47:16:0a:41:78:4d:dc:81:ea:49:d4:f9:9c:1e:
01:5f:b6:5f:8e:8b:d1:02:92:92:82:04:01:8d:69:
a8:2c:3c:99:46:f1:bc:cb:a5:ae:88:d9:75:34:e7:
b6:cf:7a:00:ce:d5:0e:82:af:8d:2d:62:92:d4:48:
2c:9f:c5:1e:51:46:8d:6a:68:ac:e9:dc:42:ff:06:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:35:D1:2C:58:49:E3:36:DF:34:01:3E:D7:C9:E9:52:AA:ED:CA
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7d:d8:87:44:d5:b1:ea:72:15:17:26:1f:50:cc:bc:fc:c7:
5e:20:f2:70:60:38:98:17:90:1f:76:e0:13:87:1c:52:71:2f:
68:f5:9b:8a:ab:f0:95:03:da:00:8f:36:b7:03:24:c2:49:6a:
49:e6:9c:fa:dc:15:36:0e:93:ac:8a:d1:6a:27:cf:83:b1:93:
5e:9d:bf:8c:1b:ef:04:04:d7:3e:b4:f7:d2:85:b4:8a:39:7c:
22:5f:b8:12:61:32:b2:ff:2d:bf:c2:33:78:fd:52:a1:68:80:
a9:57:c9:88:97:3a:bf:2a:67:a0:9e:a1:e8:0c:45:06:bb:94:
09:1b:62:77:5f:85:48:20:93:9b:c7:5e:84:d2:e8:eb:6f:d7:
16:e1:a0:23:d1:58:24:11:80:d7:63:aa:44:6b:8e:cd:99:7b:
a8:40:2b:7d:1c:d9:76:49:fe:fc:38:34:e6:d5:dc:b3:fe:b7:
1e:39:57:0c:fa:c8:7b:ed:e8:f1:25:93:90:55:ad:77:eb:a2:
34:2b:ad:db:df:58:36:f1:aa:1c:2f:10:1f:bc:51:b6:de:68:
fd:ca:ed:92:49:0c:f5:99:e3:b1:7a:ec:91:e5:d9:bd:3f:8a:
f3:3c:91:e9:09:e8:ff:26:3e:c9:5e:91:2d:79:b4:ba:80:d8:
92:fd:ee:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:11 2025 by rpki-client