Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: 7f7qLzFsbjdDtSYsy0q0xtxBN+7ctyQJb8tmYllqEiY=
Subject key identifier: 4D:FE:37:69:B1:DD:CF:E2:7D:83:43:DE:88:1E:D8:57:AB:79:70:BB
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 0194BD8528EEF882F52C432A9B9ED125200A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: i6YkLxWofCr9mc8P5Xx4oU9WTSCVmq4crOQwz95jCgQ=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:ee:f8:82:f5:2c:43:2a:9b:9e:d1:25:20:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=4dfe3769b1ddcfe27d8343de881ed857ab7970bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:f0:d1:ea:ec:a1:8f:ef:db:0d:d8:74:5e:
db:20:27:41:0f:7d:44:44:59:e0:d9:02:67:6f:4e:
dc:87:5f:fc:9d:b7:71:23:42:df:0f:22:6d:54:c5:
ea:4a:f7:62:ca:db:6d:eb:01:1a:a1:95:4d:97:00:
db:9c:23:c0:09:c3:aa:37:6a:10:13:dc:d1:d7:d5:
c5:12:70:90:e2:1e:52:73:4d:20:ae:0c:8f:47:5f:
6c:15:07:ad:91:00:e8:e2:12:48:a1:57:95:ad:2b:
f7:dd:54:73:34:8e:49:23:8f:6b:5f:2a:10:ef:0b:
f0:d2:b7:18:8d:ad:c7:80:70:c9:3b:9e:49:91:7c:
05:05:4d:df:38:80:b6:bb:fe:6e:e9:93:01:57:05:
40:2e:7a:ab:ce:87:eb:a5:fd:43:33:96:1d:25:31:
07:29:86:40:61:b9:7a:7d:0c:f5:f6:be:85:29:90:
a7:92:b4:4f:fa:7c:71:4e:9a:c7:80:64:1b:db:82:
5f:45:02:27:7b:58:e7:5e:e3:12:3d:84:4b:9e:c1:
77:a5:d0:f2:d2:01:b5:0c:b4:c6:a1:e7:22:7b:00:
2b:4e:83:ab:44:9e:8f:cc:3b:95:12:3d:f7:11:7d:
cb:96:5b:1b:98:cf:68:ac:f4:e1:2b:82:80:56:f2:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:37:69:B1:DD:CF:E2:7D:83:43:DE:88:1E:D8:57:AB:79:70:BB
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:58:f3:66:10:a0:fe:4a:42:4d:ba:e4:7c:87:15:b0:c8:7d:
c3:b6:08:47:38:75:87:a6:3e:8e:97:ac:d4:45:11:95:97:74:
a8:08:da:00:2f:4e:98:51:64:fb:29:d7:fb:cb:50:ed:f9:c1:
d7:13:59:1f:0c:db:0e:d1:31:ea:15:0c:69:45:a6:cf:f4:27:
6c:ec:9d:d6:d6:67:17:a2:8e:2f:b8:99:0e:59:30:e1:40:45:
3b:2b:89:3c:17:5c:b8:09:5d:c4:ed:c6:38:d0:2d:ae:98:18:
61:57:2f:a8:28:50:ea:cf:60:c6:cb:c5:f1:ce:fd:ea:45:dc:
af:d4:fc:6c:17:ea:3b:bf:50:f7:0f:27:b7:87:49:c6:92:61:
e1:64:c8:5d:f9:78:49:65:a6:66:fe:b9:e9:ce:d6:16:3a:f7:
33:ad:17:d3:f7:0c:69:c9:fa:e7:6b:79:96:2d:66:6c:7a:55:
27:ea:48:6f:38:c9:da:97:0f:1c:d4:8f:bd:26:88:c2:32:7d:
96:00:ec:a4:be:18:2d:5c:33:b8:62:e3:3a:f9:56:db:ee:fb:
97:08:78:7c:ef:62:32:5e:6b:b7:51:7b:5a:a8:ca:25:2a:b5:
bb:c6:06:34:8e:ba:69:cd:b5:c6:bb:5f:8f:a3:4d:a1:2b:b6:
2c:b1:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:34 2025 by rpki-client