Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: Pf5Brc2khXaIcySFJxaK9/1HtB8dSa4j3gI6cbcbQ5Y=
Subject key identifier: 33:5F:73:62:BC:E8:12:A1:25:0B:9B:F9:30:DB:A2:94:DB:E3:FE:89
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0194BC04FEA95DA1C25FC7DC4F7610EF4240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 0FF3
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: G6Sz1HN6u+CQyvHCG7v3SB11S5wD21czRFdKOq6pXQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:a9:5d:a1:c2:5f:c7:dc:4f:76:10:ef:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=335f7362bce812a1250b9bf930dba294dbe3fe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:f2:e3:ef:7a:63:5d:de:c4:39:08:cf:59:
74:28:32:38:84:96:93:6e:99:86:55:16:f1:fb:9a:
38:32:90:66:ed:58:8b:88:68:35:be:63:f9:d5:b6:
7a:0f:7f:1c:d9:f0:c4:61:7e:f4:df:85:0e:69:90:
98:7a:fb:89:e8:7c:9e:1b:2c:33:f9:58:80:0f:0b:
c5:a3:7d:f6:66:c6:a5:94:f7:93:43:43:d4:41:ca:
4c:4f:18:13:73:b1:9d:51:71:72:a0:27:f0:ad:a6:
96:0a:ea:e7:9a:83:12:68:77:34:56:69:fd:1a:00:
7b:9f:37:e4:2f:06:52:55:61:be:91:96:43:2d:84:
bb:c3:a9:b7:1c:98:bb:5d:d0:cb:70:a4:7e:83:b0:
67:a3:85:3f:ab:ba:9e:dc:46:56:b2:f5:c7:c7:d8:
64:63:48:ef:21:f1:4d:2f:24:f2:78:a1:ad:43:dd:
62:97:ef:97:a0:66:92:35:93:34:01:a8:88:6b:ef:
6b:1a:f5:fb:5f:82:77:a5:aa:ea:eb:57:fe:48:0c:
97:4a:f9:6c:c7:d1:79:85:47:3b:bf:d3:c3:82:82:
fe:9c:36:8b:15:51:62:cc:26:d4:e6:4b:f2:51:f3:
2c:b8:ad:7c:95:73:41:c7:8a:2c:a6:c9:33:bf:b3:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:73:62:BC:E8:12:A1:25:0B:9B:F9:30:DB:A2:94:DB:E3:FE:89
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:14:da:d3:af:94:cd:97:65:e7:b7:76:bf:4a:bc:4c:14:
fa:ed:00:d7:c7:b4:ea:4f:0e:24:50:a7:6b:30:c8:ec:46:6b:
ea:6f:2c:6a:37:3a:21:11:73:57:cc:3e:44:d3:8e:63:b2:f1:
5b:76:f2:c3:e7:d2:ba:7a:54:d0:17:bd:ab:19:0d:aa:81:ee:
f2:50:4c:e1:66:d7:70:9d:52:63:30:e7:6e:c0:b1:c8:6d:9e:
68:fe:75:11:06:74:2c:33:8b:ea:2f:ca:b9:41:ea:28:ef:89:
ac:dd:f2:3b:b7:11:c2:e3:0b:7f:8d:ac:75:09:5c:f2:d8:5f:
39:33:e7:ab:90:0f:2c:0a:1f:7a:8f:3c:95:92:c1:8c:2f:44:
51:fa:fc:11:55:b9:cf:a7:ba:ca:54:b1:b4:22:e4:c3:df:9c:
1a:6c:9b:c5:41:9c:9d:2d:94:d2:9f:f7:0f:65:78:ca:93:40:
da:8c:f9:a3:f4:5a:53:6e:3d:5d:45:19:c4:4d:52:75:ca:0a:
a3:d5:0b:25:57:cb:62:95:88:16:2d:99:06:fd:f6:d5:91:cc:
3c:33:c5:6c:6e:8a:5f:4d:e6:cc:7d:7a:9e:ab:9a:d2:ac:ec:
f6:dd:ce:b0:2b:64:02:f4:72:4d:f3:33:7b:db:92:b9:cd:a8:
3f:ee:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client