Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: /he1w7kVIDLQdSK/8mKKH3yFuMz1nSehI8h2Z1JkOXE=
Subject key identifier: 0A:4E:1B:5A:3D:31:7B:77:D1:A4:21:3C:A6:35:87:97:8E:32:49:F6
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 0194BC3C1EA7134191D74E3632CE46A7616A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 1163
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: TIxfoO5UMmnGUraDlWBPRCsi4KYryxuIglQf3a1vH1w=)
2: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1e:a7:13:41:91:d7:4e:36:32:ce:46:a7:61:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=0a4e1b5a3d317b77d1a4213ca63587978e3249f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:e9:bb:79:4e:b2:03:60:32:7a:09:0f:67:
a6:3e:80:da:dd:c7:16:cd:22:7a:8b:13:a8:4d:fd:
7b:01:01:70:1b:d7:cd:eb:af:6e:50:69:b1:a6:d4:
59:86:e6:ee:87:7b:3e:27:df:69:88:19:0f:9b:21:
93:f8:e7:f8:05:e5:8d:9e:34:3a:fd:11:42:e8:83:
e0:49:32:97:5e:ff:66:e7:e9:8a:52:ec:c9:e5:ff:
16:13:fc:5e:ed:43:f1:db:56:b3:e6:5c:d8:f5:3b:
9e:d7:13:f8:0d:9d:8a:74:8e:b5:9d:97:12:34:b8:
e7:89:b8:fb:7e:83:4b:95:cf:e5:95:6f:d2:d0:69:
a8:1b:66:59:6b:38:ec:4e:76:23:36:e6:8a:8e:62:
4d:7e:ea:6f:f1:35:87:69:2c:f5:1a:1b:66:80:d6:
fd:89:54:36:d7:d7:2d:26:28:a9:82:ed:99:59:a4:
d2:35:8d:02:36:89:60:28:64:20:c4:83:3b:66:f0:
e2:70:43:e5:26:8c:35:53:a4:aa:43:92:c5:d8:58:
6a:fc:3e:b1:2c:f2:84:26:ec:87:2c:a6:45:7e:e6:
3b:45:3c:ab:d9:26:e3:0d:9e:82:c6:b6:f2:f5:e3:
6b:22:20:f9:91:75:02:b1:6d:f2:ee:d7:53:a9:ea:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:1B:5A:3D:31:7B:77:D1:A4:21:3C:A6:35:87:97:8E:32:49:F6
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:17:3e:ed:26:de:b3:ed:6e:b2:e9:b3:96:24:0b:e1:c2:
d2:ed:54:6c:b9:bb:84:f0:ad:84:4a:0c:75:a4:67:0d:4e:54:
7c:bb:64:6e:9f:aa:e9:96:35:84:72:24:8a:03:29:36:46:85:
5c:73:33:ba:14:2d:b6:80:10:c0:77:66:6f:f2:1f:c5:82:3a:
b8:8f:a1:83:12:ae:cc:26:01:04:83:af:43:d9:2d:d6:9b:e0:
c5:be:b6:82:8b:72:de:20:87:c7:bd:df:83:ed:77:0b:8b:83:
67:99:a5:17:a0:e5:17:5a:4a:c0:e9:66:53:3a:d3:ab:3f:48:
6e:1d:cd:f8:14:c6:02:d4:a9:da:57:56:0e:79:0e:b2:05:51:
49:fa:80:b7:90:8f:a7:d0:79:5c:f6:60:e3:90:f0:0d:c2:85:
f4:2b:41:46:ba:19:22:e2:12:9c:e5:1c:24:ff:f4:87:1c:b6:
6f:c0:e6:2d:c9:c8:02:db:64:f3:54:35:58:60:4b:f3:43:76:
cb:89:42:0d:22:31:b3:82:f7:18:9f:9e:6b:a9:d2:47:c2:62:
06:0f:10:3b:b1:43:74:1d:cb:76:f9:e6:09:a5:9d:18:c7:9e:
e3:2a:5d:6e:93:2d:49:49:ae:de:b6:9b:f4:40:2b:e9:1a:92:
a1:81:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:42 2025 by rpki-client