Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: +qCA0j9EMCi21N14wM8nakVZf9sQku91VNLQ/mcr6fo=
Subject key identifier: A5:6D:45:BA:9F:BD:02:DD:94:88:04:F3:13:CD:E4:4F:D3:71:B5:E6
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 0194BD17CB0ACE77B731BD46A12B7C85FF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1378
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: CYSgqsE8moPb7JV+iY0+f/gRaHZpFkzcPZJiclDEU8g=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:0a:ce:77:b7:31:bd:46:a1:2b:7c:85:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=a56d45ba9fbd02dd948804f313cde44fd371b5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:46:7f:5f:64:33:b0:cd:86:1f:9d:a3:ae:
c9:cf:65:1a:7f:f6:7f:27:00:be:c0:08:9a:e8:34:
f1:d3:70:a1:63:ec:c4:c3:38:34:16:af:82:9f:c6:
3b:a9:37:dc:ea:cb:cc:01:2c:3f:e9:16:ec:9e:b4:
38:0e:43:58:1d:61:19:29:1c:98:a8:28:87:f6:1e:
7d:35:20:5d:10:6d:36:b8:2c:e5:93:51:3f:fb:be:
20:b0:56:8d:8b:c0:b7:63:1a:e1:b4:c3:9c:dd:71:
40:89:50:7a:01:b0:25:5b:56:e7:61:fa:f3:ee:6b:
47:a0:c5:ba:17:76:5b:77:e9:7a:93:b3:86:9a:f0:
3d:c8:13:96:bc:86:5f:8f:12:1b:65:4a:ea:d0:97:
35:c4:27:72:2c:28:3e:23:9c:92:88:a2:3a:a2:9e:
77:95:98:eb:b6:b7:ac:3e:b8:c8:3d:66:3b:c1:6f:
a0:a1:04:2f:95:18:ae:d3:8a:c0:74:e3:fc:88:48:
42:70:ad:9a:20:c7:af:59:08:59:9a:04:1b:24:83:
28:7e:9a:da:c9:d6:51:81:6b:2c:90:a3:eb:b4:b5:
fa:5b:e7:5f:36:04:43:79:26:1e:4f:80:72:e7:13:
f7:a9:1c:9c:9f:54:14:4f:b3:2d:39:cf:09:8b:27:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6D:45:BA:9F:BD:02:DD:94:88:04:F3:13:CD:E4:4F:D3:71:B5:E6
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:76:82:dd:8b:43:a5:3b:fb:fc:38:9c:44:fe:be:95:da:
d3:87:37:11:10:93:d5:a1:e0:90:d1:9c:db:c5:64:4b:9d:45:
d7:00:3a:39:54:c4:7e:55:98:ea:ad:3e:2e:56:ff:c1:35:da:
07:d6:9b:95:4e:34:14:a6:31:b1:fe:2e:48:0f:53:ca:98:6f:
5f:45:51:61:2a:8b:5f:63:37:e6:d6:db:19:da:f2:f3:ad:bc:
16:6e:e2:dd:89:09:14:a2:da:9f:49:40:09:bf:91:b8:02:50:
7d:78:8b:31:06:ac:bc:92:82:d7:7c:96:8a:23:ec:05:2f:a1:
a8:67:d8:9d:cb:56:5e:f2:4b:a2:48:40:c2:a4:4c:37:9b:c7:
e4:76:2d:b2:30:d3:82:4c:50:8f:96:e3:5d:2a:8a:8b:d7:67:
86:b1:80:8b:ff:cc:82:0d:78:90:16:e4:26:ff:8e:14:7b:cf:
45:94:b1:4f:05:e1:ba:5e:a9:54:25:1d:8a:71:97:1d:1d:20:
c3:c3:21:67:8a:ea:a1:c6:8f:6b:ea:97:5b:0c:00:0d:37:aa:
08:f2:fa:0c:fe:09:78:16:c0:1d:cd:fb:e8:11:23:66:28:3b:
6a:7a:15:e5:84:fd:7e:99:0b:b5:77:77:f7:a6:27:98:2d:d7:
44:24:7c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:47 2025 by rpki-client