Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: uC5eb9O+K+elykUJ0ws2MoBtY+yGHP8gQKPaoCycwWI=
Subject key identifier: 26:D3:57:D9:9C:6C:76:43:72:C6:0B:2B:E0:DB:82:FE:2D:37:DF:3C
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0194BBCE0E5A05B61B47A1D497F12B6AEF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: mG3HCuk+Z8NEPiz9xJRRCwKWk2yKQMUqhAWqxM3YOgI=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0e:5a:05:b6:1b:47:a1:d4:97:f1:2b:6a:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=26d357d99c6c764372c60b2be0db82fe2d37df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:90:cb:46:72:e2:89:aa:94:a2:5d:bc:af:
d4:12:52:f2:79:d6:53:f1:21:5a:15:26:76:1e:3c:
fa:9f:34:c6:fb:2e:05:5a:3b:0f:55:76:9c:43:8c:
bf:de:8c:89:fa:d0:a2:3f:30:63:4c:b6:21:66:eb:
9f:c8:66:b2:aa:b2:c4:d3:fe:37:dd:84:de:fb:76:
2b:ee:4c:3d:c0:08:37:ee:de:b0:9e:c8:27:a1:db:
76:ab:85:81:28:3f:fc:0a:4d:65:43:50:73:29:26:
e0:7a:85:22:ec:85:5e:ed:22:d4:48:82:7c:4e:97:
65:13:f2:26:5f:62:ff:18:51:0f:76:3c:ae:ad:e5:
6d:0f:dd:1d:89:68:f6:4a:a8:61:a2:61:27:38:73:
e6:c6:7f:05:59:f5:eb:35:c5:e6:c1:10:57:43:63:
56:f2:65:16:c2:ec:5a:9a:22:b7:bb:7c:98:19:8f:
ac:61:c8:49:2e:f5:7f:9e:4b:a0:9b:2d:06:a1:45:
02:08:c5:f5:1b:17:66:2a:b9:c8:b2:6e:11:fb:fa:
8a:13:d2:46:94:2c:c2:f7:73:86:b9:3b:4e:66:19:
b9:e4:d7:a8:92:17:71:b9:e8:1f:15:77:43:25:e2:
19:58:02:ea:a5:41:00:dd:f6:41:c7:0f:0c:0c:00:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:57:D9:9C:6C:76:43:72:C6:0B:2B:E0:DB:82:FE:2D:37:DF:3C
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8a:fe:2e:b9:1c:06:a0:8f:9e:42:71:22:d9:f8:1a:02:53:
3f:49:2a:c6:df:81:7b:47:1d:c0:ac:30:7e:43:3f:9d:ba:4b:
a4:b0:3a:47:be:a1:b4:a2:71:ed:c4:ca:17:33:84:4c:38:7f:
c3:21:25:dc:a1:e9:a9:02:4c:95:56:cb:22:85:91:97:5c:02:
23:2f:62:4d:e4:8f:c5:f4:9d:2f:bf:f6:71:8b:80:d9:f2:7a:
06:9e:1c:d9:49:7b:39:05:93:de:57:4f:bc:e2:f2:4a:52:94:
af:95:d2:0d:2a:b1:dd:49:c0:5a:7a:77:fa:72:c8:6f:63:ce:
c3:91:61:15:fa:5d:ed:85:81:72:1f:4d:41:d7:5f:cf:73:81:
69:63:4a:80:81:83:14:80:6b:31:b6:66:7a:ce:bd:64:27:a4:
16:ff:c4:77:72:17:a8:16:97:2a:49:9a:fd:aa:04:b3:36:b9:
99:b5:b2:03:0c:16:8b:e5:70:84:39:a8:e5:d3:e8:f2:f9:be:
c6:1c:9d:fd:8b:ec:64:68:d7:76:40:da:81:78:24:34:1a:59:
24:49:68:be:c4:b9:f8:f0:6c:8b:52:e0:83:fb:cf:68:b4:a0:
19:bb:34:d4:6c:64:3a:e5:e4:9a:c4:77:1c:21:e5:06:4d:3b:
a7:c7:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:03 2025 by rpki-client