Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: NaL8/KkpRNgn5Dp/GsR/uoUy8Ft8nX9qQi2GJQXEn68=
Subject key identifier: 82:70:06:28:5D:9A:5B:6B:01:9B:01:F3:0A:9E:64:0C:B6:60:D2:9E
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 0194BCA9D176F30E8F09EFEE31409A9C6EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0AD4
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: 6McM9atJxoEseuJqMgCKGGX2ggmOUqm6ysrz4Tfi7A8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d1:76:f3:0e:8f:09:ef:ee:31:40:9a:9c:6e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=827006285d9a5b6b019b01f30a9e640cb660d29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:f0:79:dc:e1:33:06:9f:bd:9c:d2:2b:a6:
49:93:4b:11:da:0c:31:5d:c5:69:21:3b:f4:6f:74:
ef:03:a6:ce:c5:15:6a:a6:29:a4:6b:41:b2:aa:34:
ea:55:59:4f:0f:da:c0:b2:3f:10:a7:e5:be:2a:ef:
45:99:64:06:0d:bc:bc:ae:39:d1:4c:d1:30:2d:c9:
87:01:ed:ab:95:36:10:53:4f:21:19:93:bf:9e:e5:
e0:78:de:ef:39:03:85:5d:24:8e:9a:d5:d1:d6:42:
eb:00:a0:04:23:99:ad:da:94:0d:9f:2c:d2:74:9b:
ec:9c:86:cb:7c:2a:97:a3:c4:50:a4:b3:44:05:18:
b4:73:bf:83:99:7d:75:34:79:a8:b7:0b:49:5d:53:
8c:cd:4d:ea:a8:88:d6:2f:24:85:48:02:cd:99:b3:
c5:0e:c3:4c:8f:65:bc:c6:02:f6:ff:98:13:29:a4:
42:7e:cd:ec:1b:a4:db:98:29:03:6f:69:ed:b7:86:
48:18:6c:8a:e3:a6:40:6b:c9:fa:da:73:1c:fc:ae:
0c:9c:5d:79:72:32:89:e2:d4:8f:0e:01:59:c4:b4:
f7:79:f6:09:be:33:d5:4f:63:81:5b:98:41:62:a4:
ff:26:33:2c:2a:b7:bd:65:2b:27:94:8c:1c:e1:70:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:70:06:28:5D:9A:5B:6B:01:9B:01:F3:0A:9E:64:0C:B6:60:D2:9E
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d4:c3:dc:b5:66:cf:61:9e:8a:88:b0:5d:74:93:0b:a0:87:
91:54:ba:35:16:26:7b:48:73:17:61:4c:3c:82:95:ab:29:cc:
f1:31:eb:f0:42:c4:bd:bd:e9:d1:ee:f7:46:c3:d4:6a:6b:0c:
84:c4:6a:79:1e:1e:c0:e7:58:0d:64:34:74:67:76:fb:73:b2:
26:5f:d4:52:39:f9:05:53:c7:79:52:20:5c:fc:36:8f:92:10:
9d:76:7b:b7:1a:c9:b0:e4:9d:d4:55:92:42:e8:79:43:fd:3f:
03:b6:8b:ef:83:4e:4c:55:dc:a7:9f:58:47:d2:bb:de:b6:08:
a5:da:ad:89:3d:d8:d2:06:72:f9:5b:0f:db:66:82:5e:bf:43:
87:8f:9d:ae:e8:a7:40:b6:ae:87:c1:2d:e9:b0:26:d4:67:85:
80:a4:cd:d1:27:c7:f2:0f:2d:07:8a:1e:28:82:7c:74:f9:fa:
83:e0:8e:19:e8:6d:8d:ec:ab:e7:37:8b:3b:6d:b2:db:2f:37:
c6:92:34:0a:ce:8d:a8:0f:fc:d5:ad:35:95:d9:b5:10:cd:1a:
4b:3d:c9:a2:17:c7:8d:e6:9b:1d:5f:0d:7f:2f:d0:32:1b:32:
b0:6a:84:5d:e6:26:9c:bc:ab:b8:0c:83:43:6a:b3:8e:59:7c:
7d:34:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:05 2025 by rpki-client