Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: g2KhF9RoYDY+/OKvGoM0j3CKrM98tejHabDMB16QrGc=
Subject key identifier: 9F:C6:16:46:9E:CC:54:77:E4:08:89:0E:0B:87:03:48:DF:AE:69:5A
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0194BC73048376E133672927A269E9DE7FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: v5zjDVZodzHOMKuUm9X5/ldvLhSd3KhB/zsHmIvxNmk=)
2: o3EKSKwUA8ilyykvM7SHaSr2DUA.roa (hash: 2XhNtzZjU/zR3mpeJKzud81zTrtAmg7Vp+fEk11rcEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:04:83:76:e1:33:67:29:27:a2:69:e9:de:7f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=9fc616469ecc5477e408890e0b870348dfae695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:b5:a9:04:59:72:2b:16:2b:b7:46:25:5d:
c0:51:99:5e:eb:4a:d5:dd:48:7c:36:38:6f:37:03:
ac:3a:72:8a:50:a3:4b:4b:db:75:20:f5:de:d1:49:
b2:7d:b1:f3:73:c2:25:a9:44:b1:17:46:f6:a4:5d:
de:83:4c:fa:0d:39:19:1b:68:cf:17:c7:2b:f5:8a:
9a:95:7e:bc:75:26:7d:ae:ee:59:cf:d1:df:ff:23:
79:f6:80:f4:77:6b:74:52:b6:a7:f9:ad:98:2f:fc:
e3:78:7c:61:ed:f1:1b:fb:1b:cb:85:c2:63:40:94:
be:8b:31:5e:68:63:87:c1:ba:7d:d3:50:1e:f7:1f:
8c:a2:17:56:fe:11:32:62:53:3a:09:5f:4e:d3:d1:
12:28:da:41:17:d0:1b:8b:9b:10:ce:ef:ab:13:0c:
dc:77:bf:e8:e4:91:af:65:c2:0d:41:71:e3:9c:65:
0c:f0:ac:05:32:a0:cf:0c:01:78:a0:82:39:15:ca:
50:49:d7:3b:78:cf:c6:1c:08:af:06:58:ef:dc:ec:
65:f7:c2:67:bb:2f:ec:1a:bf:07:32:18:83:d4:95:
28:2e:22:39:04:12:40:f9:cf:ad:2b:0e:37:53:8e:
49:8e:e3:42:5c:31:4b:80:24:77:9c:63:03:44:85:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:16:46:9E:CC:54:77:E4:08:89:0E:0B:87:03:48:DF:AE:69:5A
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:65:1c:8c:76:60:27:ff:38:94:4f:a9:cc:bb:6b:bd:22:
0e:2d:78:55:6c:52:26:c4:f7:9a:9a:62:95:e5:02:f7:0d:03:
f3:1f:80:e2:55:49:d6:2c:4e:f6:b8:26:85:64:8b:36:a3:b5:
5e:22:54:fa:18:22:ad:38:c3:61:fe:e0:16:53:bb:98:2c:49:
56:e4:39:9e:4e:5a:08:2c:b6:a7:05:67:ff:82:2d:dc:dc:97:
c3:68:5d:b2:a7:50:da:cd:2b:9d:14:5d:4e:06:62:70:70:b1:
6f:dc:06:85:1a:ae:c9:ba:ce:4b:f5:18:53:6a:9d:81:01:47:
c4:1f:a6:a6:64:7a:65:9e:a5:d2:21:c7:68:70:95:9e:8b:e5:
ca:46:32:27:61:ce:3b:54:56:47:3a:8d:65:1f:72:d4:21:63:
07:30:80:f4:eb:72:70:ab:2e:65:47:97:53:3f:44:a4:0a:f4:
2c:f1:0f:19:30:d3:f4:7d:6a:4b:6e:19:9c:6a:c9:1b:c0:9d:
05:77:04:2b:11:e3:da:4a:43:2f:a0:0b:47:33:62:72:40:1a:
bf:c5:06:19:59:97:19:4d:09:83:e3:c0:c1:87:f0:6d:0b:38:
0c:bf:d3:61:60:53:2b:4d:72:c8:10:70:ac:18:6a:d2:3b:59:
35:14:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:36 2025 by rpki-client