Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: dRiZP2ZJ+fwpU6M47I0R4fwGUOnU8EFIJHsKYah8yg0=
Subject key identifier: 17:9E:09:64:0C:F0:D6:E6:1B:F8:9F:98:9E:9F:D7:EE:DF:26:E8:E2
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 0194BD4EACEF27FDCEBDBFF7F1408149BC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: m0XTeJdvlD0sZ3qYPamRGDMHNvQWxJ0Gx7bhHpqmKwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:ef:27:fd:ce:bd:bf:f7:f1:40:81:49:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=179e09640cf0d6e61bf89f989e9fd7eedf26e8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:85:b4:79:1c:9a:e2:d1:2d:a6:fa:53:e7:
80:56:9f:cd:15:32:67:69:34:6a:29:41:19:7f:80:
b9:74:7d:fb:7f:66:52:88:7a:fb:7e:4f:82:b7:cb:
0f:94:d6:5d:af:b0:9a:10:8a:5f:b4:55:3c:5b:49:
77:cc:41:54:3e:54:58:d5:76:e4:65:7a:1e:53:60:
78:89:5d:cd:04:c7:7f:28:2a:82:91:13:55:d1:1d:
89:b4:de:2b:94:32:fe:4c:8f:0b:de:dc:76:93:18:
bd:33:8b:ee:31:d4:4f:77:26:00:26:02:38:c1:4e:
1f:6f:2a:96:ee:42:2b:74:9c:3c:f0:19:9c:82:12:
3c:f2:e6:69:23:6d:e1:18:ed:c1:bd:e0:13:62:17:
10:46:8c:d8:de:a3:64:1f:43:6a:14:6d:10:3c:92:
0c:c7:92:bd:f7:cd:db:e9:be:a8:a6:e2:f6:be:a9:
14:52:7d:d8:a9:58:b4:98:36:3d:42:49:99:a6:e0:
df:c6:53:42:6a:02:b2:9c:10:08:6f:38:7c:c7:39:
5e:4c:23:a4:78:63:f4:d2:e9:93:d0:81:09:bd:aa:
3a:c8:a9:44:23:b0:4e:d4:b9:a1:60:2a:04:0b:61:
f2:71:72:27:a3:ec:c3:21:1f:d3:b3:a4:65:bb:b4:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:09:64:0C:F0:D6:E6:1B:F8:9F:98:9E:9F:D7:EE:DF:26:E8:E2
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:ae:e3:a7:05:25:eb:db:91:a8:93:11:9f:06:8a:0d:d9:
5a:c4:f5:89:50:3a:27:d3:5f:c1:05:c3:42:09:1a:67:b1:d6:
47:1c:a5:d0:ba:cc:c5:76:ee:8e:a5:83:1c:14:85:02:19:8e:
8d:b1:ea:12:8f:3a:4e:26:92:41:be:fb:c9:2f:dd:d7:47:60:
ec:05:60:fc:4c:6e:01:4f:0c:95:37:e4:13:85:ba:e6:74:04:
1f:7d:1a:f5:e9:c8:02:47:f9:8c:12:aa:4f:f2:ac:f1:5f:53:
55:3e:d4:79:1c:0f:66:14:b4:a5:14:a4:7e:2b:f0:ab:76:23:
4d:ff:83:ae:6a:c6:d6:34:54:9c:c3:0f:43:0f:2e:45:97:48:
67:f8:c4:32:a3:c6:5f:77:fe:07:05:60:94:c1:37:18:0c:b6:
59:9e:81:9f:9f:17:c0:6d:a5:35:2b:b4:93:60:f5:17:83:38:
31:8a:5b:2a:d2:d5:22:8a:6e:c1:c6:bc:42:35:e6:ad:a5:b5:
b4:a5:62:f6:11:27:f9:60:6c:36:cc:12:bc:09:3a:ba:2c:2a:
e8:ee:08:7f:f6:c5:23:47:57:e2:a6:eb:0f:8c:7a:4d:35:8a:
a6:7e:26:62:9b:7f:01:bf:d1:d8:19:c5:ce:02:e1:2b:08:cd:
2b:40:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:37 2025 by rpki-client