Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: pblW/r2XMR4AaRxIlbMhPX2UnFUxxh5RYceoBwALnD8=
Subject key identifier: AD:78:8B:F0:F2:F1:CA:EB:BB:FA:37:04:E9:7A:35:C5:EA:B1:45:B2
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 0194BCA991416FCEBF4239E010AA48710537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: SRUu6GrWG3+Fizm1fJYdBAidUbP7ADURG88GOq7lvMQ=)
2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:41:6f:ce:bf:42:39:e0:10:aa:48:71:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=ad788bf0f2f1caebbbfa3704e97a35c5eab145b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:69:73:5b:ec:71:42:6e:20:e6:3d:ce:9a:
07:da:72:f9:fb:3e:6b:1a:ac:c5:58:36:52:56:22:
21:94:84:d9:3d:f1:f7:04:6d:c2:ff:28:3e:89:c1:
1f:14:e1:39:fa:5c:22:63:fb:eb:51:09:a1:49:f2:
7a:c2:37:30:3d:f0:35:9b:89:5d:76:44:d9:54:8a:
bb:d8:e7:d9:bd:02:41:c8:6e:4b:72:6c:20:ee:3a:
3d:a8:52:6c:8b:28:51:97:f2:07:33:5b:9f:86:ba:
aa:2e:90:09:8e:64:28:80:17:96:4f:b7:6b:4f:5e:
99:3b:e9:22:fc:a4:34:10:de:e2:18:90:93:a0:ce:
e7:c6:7d:66:ad:24:78:60:95:d3:51:39:08:fa:ac:
ab:ab:8f:9b:4c:1b:53:9f:23:6f:35:19:ff:3a:a1:
66:8a:40:77:79:f5:bb:a0:e0:f1:53:93:80:7b:c2:
ae:34:7c:f5:50:ad:4e:b4:a2:0a:12:0a:86:d6:75:
6e:aa:d0:37:2d:10:a0:5f:7b:4b:c3:73:e4:cc:aa:
a4:4f:f1:bc:66:e9:27:45:e0:e3:dd:90:ef:92:b0:
bb:b1:78:92:20:69:d4:35:ee:bc:95:1a:ec:1e:1a:
fd:49:ef:04:60:ea:30:3c:69:04:f8:ef:f5:90:d8:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:8B:F0:F2:F1:CA:EB:BB:FA:37:04:E9:7A:35:C5:EA:B1:45:B2
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:0b:c7:a9:a9:92:5e:77:48:e0:31:21:73:43:2f:e1:fb:
56:9d:e3:fc:2d:1e:9a:05:fc:97:ca:44:4c:c3:0e:f1:8c:f4:
fa:17:e4:29:13:6c:67:87:c9:56:84:83:d1:a2:fb:49:fe:38:
ed:6c:98:83:1d:d8:3e:7e:c2:cb:30:8d:c0:ef:2e:a7:fa:f0:
4a:7f:d5:18:82:da:d2:b7:b1:73:e3:5d:ee:fd:cb:cf:f7:f7:
d7:af:e5:f7:2c:cf:bf:60:c4:50:6d:0e:15:3e:69:ff:41:c2:
86:7f:f8:74:a8:e7:3c:86:a4:d8:33:f5:b5:90:2d:bc:7b:7f:
51:33:ae:e7:c9:dd:14:e3:a7:44:8f:bd:0b:c5:85:2a:2c:e1:
c7:d7:db:e9:3b:f4:fa:4e:fb:6a:83:f6:30:a0:e4:78:cd:1e:
07:db:67:00:54:13:75:44:9c:cb:d8:f4:cd:17:1a:26:ca:cd:
24:9b:75:3d:a9:9c:ae:9e:91:88:54:e6:5f:77:95:d0:1a:bc:
0b:1b:d5:0c:4c:c8:a7:b1:36:60:dd:f3:0f:74:88:d0:02:62:
78:ce:83:a1:e2:97:9d:7b:05:eb:59:36:6d:e1:4a:7d:b9:26:
c8:5f:fd:77:c1:86:44:61:f7:2c:9c:3d:e7:82:6e:6b:22:93:
be:33:02:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:07 2025 by rpki-client