Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: h8znlKbikn+tIMK08Agsd9VkfPzaIiBdRe2bVA1CRwI=
Subject key identifier: 5F:12:89:B5:42:37:58:7A:5C:18:6A:15:78:C2:9A:91:1C:57:12:CE
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 0194BD4E59CC9C32BE2ECAC23F7A8B82333B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 13F7
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: Sd40nWRI3e92L9InRtbAkKsfqmikqH/jUNFWKgtAvbQ=)
2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:cc:9c:32:be:2e:ca:c2:3f:7a:8b:82:33:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=5f1289b54237587a5c186a1578c29a911c5712ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:16:19:ea:39:56:39:5c:d1:56:5a:7e:61:
52:20:2d:8f:63:58:ea:f7:25:85:70:ae:91:b3:4c:
6f:4c:ac:17:df:6e:e2:82:26:3d:fb:97:0e:9f:f6:
93:4b:6a:7d:15:a4:e2:2f:fd:95:a5:97:65:91:3a:
51:2c:23:84:04:41:ba:64:f5:ca:1a:09:e6:97:3d:
d5:cb:72:ed:e1:d0:b8:3a:47:fd:30:d9:50:55:ad:
eb:41:3c:bf:7b:a9:08:ee:50:52:04:dd:f8:a8:09:
c3:e1:cd:6b:aa:f4:28:89:e9:71:1b:bd:25:14:1f:
a6:4c:a3:c0:82:af:59:da:ec:c8:4d:3f:b8:c0:ba:
38:be:b3:72:5e:59:8b:21:e0:69:9d:30:0f:90:d6:
04:59:8b:1d:c1:7c:73:6e:1d:57:9a:57:5c:b3:c4:
7a:a9:96:2a:83:a5:64:e0:f2:93:d9:30:36:c0:4e:
aa:79:ec:7e:32:e1:a4:66:a4:32:7e:a4:be:d0:50:
d7:eb:40:52:4e:6e:53:bb:1a:6f:f0:63:10:20:33:
00:48:58:0d:c4:01:17:be:2e:8e:c9:ac:49:c2:52:
53:2b:ec:a8:1f:9f:d0:2b:7f:ec:18:cc:b6:79:22:
6f:7d:d8:a5:37:cd:21:49:9c:32:75:08:4e:2c:84:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:89:B5:42:37:58:7A:5C:18:6A:15:78:C2:9A:91:1C:57:12:CE
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:8a:e0:a6:6d:aa:fa:12:ea:fe:3c:04:1d:95:de:19:ac:
64:d1:45:f4:65:20:f5:5c:dc:a8:80:f0:87:fb:a7:a1:b8:1a:
f1:ae:61:c6:67:11:2a:cc:c9:96:f7:e9:17:cb:80:6f:a8:09:
bc:f5:72:5c:d5:d4:d6:f1:cc:eb:02:2d:18:12:a0:71:a0:c4:
20:10:8e:0c:64:3c:05:bd:35:3f:dd:f0:bc:2e:ee:d9:bb:21:
52:41:50:f3:a2:d2:0b:0f:58:15:c3:0d:d4:c2:4a:12:ba:f5:
36:ab:ff:a3:57:e3:fe:f8:b4:65:e3:79:ea:11:d7:d5:da:5c:
0f:a7:e5:01:38:b9:d2:3a:c9:a9:08:c0:6f:69:7e:c6:63:c8:
97:d8:83:42:ff:91:fe:2a:f1:1f:a0:9b:a8:81:25:73:e5:cc:
82:59:0e:d8:ab:84:ba:68:3b:d3:c8:11:dc:69:e0:ba:bd:9d:
65:b9:b8:1c:85:a5:07:14:15:f9:aa:17:32:aa:cf:9f:56:bf:
d0:a5:94:32:4c:78:e6:ca:0b:03:d6:1b:2d:6e:ed:93:ac:1c:
af:12:8c:6a:be:3c:99:5c:9c:a5:6e:dc:12:61:22:16:33:5e:
45:eb:00:66:df:b9:92:3b:5f:6f:d7:47:7f:42:aa:54:5c:66:
7d:f6:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:53 2025 by rpki-client