Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: CP8lm6TnxHsclwLEv6F9trEfH6ev+GpVne+nTMFlijY=
Subject key identifier: FB:06:CC:1A:A5:BD:5C:73:CF:C9:AA:26:52:62:E1:CE:EE:65:7F:0B
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 0194BCA9FBF4933DAAA6086021236C02A084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 0F46
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: NLv7+zFMm8QGgrhV/Oi84IdqIuq0V6ys64QiD+4y900=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:f4:93:3d:aa:a6:08:60:21:23:6c:02:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=fb06cc1aa5bd5c73cfc9aa265262e1ceee657f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:fa:c2:6c:18:b4:6d:c6:b8:95:36:9c:04:
aa:90:81:24:6f:66:61:ed:f5:93:ad:8c:14:c5:44:
ae:be:6c:31:41:c0:02:30:e8:f4:7f:64:a5:83:c1:
f4:f9:00:07:a8:c2:70:5e:86:6e:d5:cd:92:eb:b5:
24:57:87:25:ef:e2:30:68:7e:8e:bf:64:8f:85:b2:
e4:92:31:64:d0:91:f4:4d:95:38:71:98:03:d2:e2:
97:a1:7e:ab:24:dc:3f:b7:0c:f1:08:07:55:d7:ec:
7e:89:a8:4a:5e:a9:16:c2:9e:81:2b:48:bf:6d:da:
d7:5b:f5:5d:d5:b4:6e:3e:40:8f:92:c5:b9:29:31:
d3:4c:ce:f8:6b:b4:ab:75:97:7f:a1:5b:75:dd:8f:
f9:4f:25:48:9f:1e:31:dc:24:a0:98:32:39:a9:40:
80:c0:dc:ed:a6:12:40:9c:71:93:2e:ad:19:8e:fc:
8f:ed:c7:2c:f9:a9:cf:92:72:a7:be:98:6c:35:e8:
60:17:fc:69:47:56:ae:83:67:31:8f:a8:73:d6:ea:
e0:63:05:cd:2b:79:f5:53:32:41:f4:e8:57:02:0e:
46:e6:6d:ef:06:90:95:48:dc:27:13:fb:df:0d:c7:
10:c3:6e:28:f9:ef:a9:47:35:1e:6e:f5:aa:db:da:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:CC:1A:A5:BD:5C:73:CF:C9:AA:26:52:62:E1:CE:EE:65:7F:0B
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ca:89:87:67:f4:b5:26:e5:c5:22:00:fe:5b:3a:db:dc:b8:
81:06:1d:bd:9b:17:94:11:d8:2f:f8:7f:c0:ab:c6:ed:63:e2:
77:dd:e2:a2:a5:b1:f3:ce:bf:c7:d7:27:3e:61:3b:9f:9a:29:
4d:66:0e:0d:78:a9:88:eb:4e:7f:2c:a0:61:02:a8:46:0d:9a:
f6:64:b0:9f:84:da:0a:d8:bd:19:51:2e:82:94:ca:54:ae:e1:
e1:0c:f4:b9:ae:9a:b7:5a:c7:8a:d1:16:d1:96:09:ff:f9:c4:
69:3a:47:02:f9:69:3d:26:15:29:f5:0b:5c:8d:7f:d6:29:37:
ef:d3:42:96:89:19:d3:fb:34:d9:bd:11:cd:dd:f1:30:a2:2b:
70:d1:3c:b2:d3:03:cd:62:e4:ad:8b:a9:8e:06:97:2d:1f:ec:
a0:d2:eb:03:ce:86:05:96:59:4d:f6:20:1c:a5:cd:d4:94:77:
47:a3:4a:03:37:ef:ab:69:c4:69:fb:13:8e:fa:78:4d:b6:1f:
7c:45:e9:a9:aa:ee:fe:83:cf:8b:82:a2:dc:4d:a5:26:49:80:
28:7f:ee:58:ae:eb:4e:ab:da:55:8a:0c:6e:80:1b:c5:57:ac:
7f:90:13:64:6a:ce:1c:ac:ac:89:bc:2d:e7:c9:6e:5b:ff:07:
3d:49:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:47 2025 by rpki-client