Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: B2ZTB+bfD5cEZ241sHZpU4fPFcELVs91+HAvUm1OwW8=
Subject key identifier: 2E:00:3C:67:04:D0:B8:6E:B6:05:BE:EF:50:11:79:80:5D:D2:18:EE
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0194BCE0B162F1E4BA528ECB6DCF5C965347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: 926G7DO3udTp/TfmnYW9hWUXBpttx7tsdI8hUj4Ge/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:62:f1:e4:ba:52:8e:cb:6d:cf:5c:96:53:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=2e003c6704d0b86eb605beef501179805dd218ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:7f:61:73:88:c6:2f:97:c1:5f:1d:0f:f1:
86:7d:cf:b0:07:c1:b1:47:02:9d:19:83:20:e0:54:
36:7e:39:75:f0:44:1a:33:72:5f:dc:b6:e3:25:da:
05:5a:0f:34:22:a6:87:d8:53:d0:74:9f:90:91:92:
d3:8c:b8:40:ca:21:41:d4:6c:48:55:55:95:34:4d:
ac:de:d5:18:00:9d:d0:e0:37:91:09:b9:70:4d:3d:
82:1b:0f:b0:e8:21:ea:71:c3:7c:9e:f9:d5:68:66:
ac:ea:5e:e6:81:60:20:a0:7d:34:75:b2:7a:a3:59:
42:6e:6c:a4:44:02:87:97:0b:2f:60:17:92:bf:9c:
42:f6:0c:4d:e9:97:d8:3e:33:8a:cd:51:7f:d8:13:
dd:be:68:98:b5:50:93:30:eb:37:1a:40:53:9a:8f:
cc:f9:22:c2:a2:17:4e:67:3d:e9:85:d6:f0:2e:bd:
be:a6:76:b0:8a:1e:5e:6e:18:a8:40:9f:21:70:b5:
30:66:2c:17:ed:f9:81:7b:47:4b:6f:0a:bc:6c:1d:
58:af:2b:51:14:84:bb:ce:7b:13:50:53:3a:b9:00:
b4:32:d7:21:2d:6a:e9:56:8d:4e:5e:50:b3:6b:73:
88:df:c9:61:90:a7:7a:80:98:af:ed:bc:66:27:0e:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:3C:67:04:D0:B8:6E:B6:05:BE:EF:50:11:79:80:5D:D2:18:EE
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:97:eb:a2:d8:4c:99:23:54:48:7e:ba:e1:02:85:8c:4a:2e:
22:1d:09:e8:d9:3b:2c:b3:e5:02:cb:ae:1c:3b:f7:43:2e:ac:
c3:e0:c5:fd:15:f0:61:eb:b2:a1:8b:94:0b:10:4d:0f:15:ea:
2f:07:2b:d0:76:f1:58:34:c7:cc:11:cb:61:f9:44:1f:d7:36:
3a:38:a2:73:14:e3:bd:d5:9c:65:de:77:3a:ad:23:41:37:a6:
ee:c5:33:e1:b4:52:6f:e7:a7:c3:67:65:1e:3f:8b:bf:78:e8:
70:9f:4f:6e:2c:45:f3:cf:3e:27:23:3d:67:00:1d:a0:cc:43:
04:ea:f2:df:77:87:12:cf:43:86:70:8b:1e:d6:1c:78:21:55:
a3:db:f9:c2:7e:b7:4a:07:c1:99:64:20:e8:b3:19:63:ad:4e:
5c:67:2c:be:b2:c4:b1:c5:3b:3a:60:0d:22:0e:a5:1b:55:e1:
79:3f:32:b2:be:40:1d:e1:3c:e9:3d:bb:37:78:49:fb:62:5d:
3e:53:43:47:89:0b:71:bd:76:68:8a:dc:f3:e4:20:78:43:d1:
95:05:f2:a4:c4:18:73:c2:6f:8c:dd:b8:4b:06:db:2b:a4:f4:
69:e0:da:17:5f:5e:87:4b:36:74:47:33:97:ee:e9:c8:14:45:
f0:38:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client