Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: ySymgcIFn+8tAtUMevnExxwA2zQ+oKsOEusyWWCBXxc=
Subject key identifier: 77:3C:F7:06:D2:5A:35:0A:E9:B7:41:46:D4:62:78:55:95:BE:6A:74
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 0194BD85A2DFC60B521C262355D1343CF5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: ED
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: myD+pXuhBR2aRh7ICqJSVC77YCm29s0YUFTpKXHc4WY=)
2: qwYmAilJbRBMI39FkpTP_w6-giU.roa (hash: eoUyvisaDk7RUT9/0E0aAusjvGb+PkYvBwEuQg7Hu90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:df:c6:0b:52:1c:26:23:55:d1:34:3c:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=773cf706d25a350ae9b74146d462785595be6a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:80:12:00:75:f8:61:1c:c3:c0:54:8a:c5:
d3:41:a2:c7:9c:e4:c0:29:9f:04:9f:39:04:b2:da:
3c:36:04:81:02:13:07:13:1a:05:f8:49:e8:84:e9:
18:99:84:b4:af:62:d6:55:c1:67:f3:f9:2d:0c:08:
12:4b:ca:59:db:c0:b1:28:cc:59:ba:6a:c0:83:34:
28:1e:6f:59:fc:e3:4a:dc:3b:dc:d6:23:03:dc:f5:
e7:93:3e:76:7d:6c:ca:ff:72:c3:33:b2:16:3e:cc:
02:b6:db:a3:23:6b:b6:77:53:b7:4d:c8:37:c8:7f:
7b:79:0c:5d:82:1b:ab:2b:3c:49:40:35:30:77:a6:
3e:61:05:1e:15:ed:0e:fe:7e:36:6e:8e:02:88:99:
45:a4:a8:5e:f2:d2:61:27:34:9f:00:bc:bc:68:80:
1d:ab:87:aa:54:65:51:83:c8:a7:54:09:c5:31:d4:
d0:de:bc:35:d0:48:4f:1c:39:31:38:3c:ae:bf:f0:
fe:0b:44:3d:06:ab:82:48:22:4b:93:dc:8d:db:e0:
cd:07:ff:82:ca:32:ac:2b:dd:1c:1a:cb:45:29:65:
12:14:d0:f6:0d:5d:f3:62:6e:80:7d:cb:fe:04:fc:
6d:f7:be:bc:de:c5:f9:f1:fb:54:8a:e2:7c:a9:69:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3C:F7:06:D2:5A:35:0A:E9:B7:41:46:D4:62:78:55:95:BE:6A:74
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:fc:57:c6:fe:49:1d:62:5a:08:72:14:3c:a9:5a:24:98:
96:29:30:cf:3c:3c:d2:80:76:93:ef:52:ee:e2:00:1f:2b:94:
97:dd:00:7f:29:fd:56:09:80:7a:99:35:9d:4c:7f:77:c7:dc:
b9:a4:27:c6:5d:bf:2f:16:02:6f:28:b9:ad:ed:d7:03:29:c6:
6d:50:b4:6d:54:a5:df:29:e0:a5:9f:46:82:46:c6:77:13:c6:
34:a2:35:15:30:f1:bf:82:11:e2:f0:a6:16:6f:6d:9c:b1:d0:
7d:c4:29:47:3f:82:b9:d3:3d:eb:76:e1:93:84:ad:0a:ec:40:
84:9b:5a:6d:29:75:82:7d:26:7e:97:5d:49:58:3c:e1:f9:d9:
98:79:58:96:28:d7:6d:c3:2f:70:d8:9b:b5:5c:0b:14:33:5f:
f8:80:f5:f6:89:9c:b5:ac:f4:1d:fa:d2:2b:de:3b:95:63:78:
13:9c:69:14:c0:44:c9:f0:f8:1c:6b:9d:16:48:5f:3c:81:93:
ab:65:a6:b1:2f:df:7f:e9:1f:92:73:95:62:b9:ec:97:9c:cb:
32:ce:0d:d5:31:cc:1a:fe:17:67:d1:1a:b1:40:cb:e2:00:26:
45:9b:de:3e:d5:14:3f:d2:6c:c3:53:6e:5e:fd:f0:99:1c:f1:
9f:71:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:43 2025 by rpki-client