Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: W/hr/5SELyvI4CHe2q7UzrfKBqJGo7/LzEVDIPswtEI=
Subject key identifier: B3:96:0A:51:AD:17:07:B2:F3:8A:7A:85:1C:11:7E:9E:01:1D:98:2F
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 0194BD4E6C0D123DF0E272F66FD80E550487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: A+0K/WAwgUs/yHqKDSSZmijyI1QV09FCqbIBeR06dqU=)
2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:0d:12:3d:f0:e2:72:f6:6f:d8:0e:55:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=b3960a51ad1707b2f38a7a851c117e9e011d982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:9c:31:d4:64:4e:9e:f7:9d:20:6f:48:71:
ee:82:e1:0f:53:9c:35:0e:2b:11:e5:cd:0d:f1:69:
b3:d4:b4:fe:95:03:ea:94:fc:99:94:dc:17:ac:13:
f7:a0:9e:38:99:81:a2:fd:11:96:71:8d:d4:88:9b:
44:16:22:35:ae:6f:ba:3d:df:22:d4:54:14:44:11:
b9:e4:2d:1b:cf:9b:b8:f1:dd:a0:7c:b1:39:50:68:
1a:db:0f:79:ad:7d:43:ea:7c:c8:c8:2c:2f:f7:be:
38:77:4e:12:a4:76:ec:77:d8:39:ba:07:d6:8d:ee:
82:c4:e5:1d:20:8f:31:e0:7f:b0:00:f1:f7:de:a6:
0a:a9:30:58:a5:e4:af:d0:ee:5a:f8:e6:b8:a9:27:
b4:57:9e:01:50:58:99:1e:b3:8c:68:4a:48:8b:cc:
3b:28:79:ef:42:d5:d5:b7:1e:b3:c3:df:1e:43:f5:
15:cd:8d:84:a2:bc:49:cb:30:49:3a:06:55:90:08:
fa:e2:97:d7:dd:07:82:4f:b2:f5:96:f1:dd:f7:4d:
32:9f:f7:32:cf:07:75:8d:fd:33:d0:73:e1:15:03:
cd:80:2d:ac:86:46:59:52:e5:f1:2a:e2:ed:28:5a:
43:c3:19:22:ea:ab:ac:0f:1a:4e:fb:5b:55:ea:56:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:0A:51:AD:17:07:B2:F3:8A:7A:85:1C:11:7E:9E:01:1D:98:2F
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:d5:f6:c4:7e:3e:56:0e:b2:31:3f:9c:96:dd:bb:79:f7:
86:6b:d6:4d:e5:42:9e:47:4b:1c:71:51:a8:c1:25:5d:f3:dd:
c1:22:b1:94:79:f7:f4:c8:b7:ef:ac:a6:6e:6a:69:db:71:42:
f5:36:09:18:61:0b:14:72:ac:79:b4:64:b3:31:b0:d2:48:11:
cb:e1:ea:2c:a1:a7:ca:5f:1d:65:ac:ba:e2:d6:69:5f:b4:f5:
5f:18:5b:e8:99:56:5f:25:23:32:ef:1b:b9:ee:28:03:a0:5c:
f6:50:0e:f6:e0:89:4f:79:2f:89:f2:8d:7c:9f:33:49:71:43:
93:b6:03:53:87:2a:2e:6a:fc:2a:25:2f:3b:03:87:27:07:25:
8a:75:45:47:30:4f:f9:c0:d3:d5:af:0e:ee:b2:22:17:c6:48:
18:bd:94:09:5e:1b:50:27:b7:7e:6c:48:51:12:e9:11:58:a2:
3c:79:f8:54:58:cc:b0:ff:69:fa:66:ce:34:70:d4:13:b7:c4:
09:7c:f0:67:d3:88:ba:b2:77:12:03:3f:95:44:0f:ae:e3:15:
dd:a9:18:97:fe:56:41:f7:29:55:cf:8a:33:38:69:07:ff:ab:
b4:7e:8e:5a:84:c4:e1:23:3e:72:83:a6:8a:6c:cb:a7:6a:05:
92:51:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client