Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: 0Wj4LARBHYdg6zWaAMeHNuwwrA/DW8ynP3BBBVagX1o=
Subject key identifier: 84:77:55:70:A0:20:F3:7D:AC:AA:60:13:30:C2:20:9B:14:EE:BE:8F
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 0194BC3BC93F66C711D5256039AB41DC309C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 1-RhDcNYEqAV9zgW384agcxQGvVQ.roa (hash: tYpbAh+cAHM1izV/ETf3AANIWRAFx9dkB7c17S/0d5g=)
2: FM1ZToDPfltq70sgYZxUZRvW9lw.roa (hash: gobn7d36Th+HhvhLfnOuWn7jGYlz7+noOsxaYpWSY6w=)
3: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: Oe8zvNsfoQ4jo5k/BT2vTvApKRU9vFyHQHhKRnFunf4=)
4: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (hash: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=)
5: Ufx_uGX33YMRJk96-Ns3OVYoYkY.roa (hash: R6OFTPlC+5+pTqseUyT+JKWuhsqJ8TflqBO+jG6Oft8=)
6: aouWF1EL5PqaDekCOWFKRFFElco.roa (hash: meYwuUzRknXw4amv6l3WdhCHcJ6/5boQjSOQLig1VyA=)
7: t0LizRcpCedVGV7G-fII8jBvx0A.roa (hash: ZN5BTBda6bGmBj8NTopRMZUMlk+FQ8YAMSGu4VazGr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:3f:66:c7:11:d5:25:60:39:ab:41:dc:30:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=84775570a020f37dacaa601330c2209b14eebe8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b9:41:18:57:cf:85:25:60:79:06:e8:d0:34:
db:b0:60:3f:fd:3e:26:48:9c:a6:f7:15:c4:48:6f:
eb:74:d1:61:6b:fe:1b:15:07:ee:9c:6b:37:74:b4:
5b:4c:68:e8:08:f9:8e:9d:73:f2:e8:92:9c:46:77:
c0:58:95:96:46:02:39:56:e1:f9:2f:cb:e5:83:71:
9c:9a:a5:fb:46:3b:5c:24:f8:e6:b9:d5:5c:1b:38:
c2:88:31:89:74:30:ce:93:ae:03:7b:83:89:5c:80:
c7:11:32:c9:07:3b:51:e3:6f:55:18:fd:74:63:7a:
08:13:16:94:ab:b8:01:f5:ea:f9:a5:ed:0c:d4:1e:
18:cd:0b:2f:c5:a1:52:dd:32:19:77:b1:f7:80:79:
8b:95:2b:62:81:ae:4c:90:0e:91:a9:1a:bd:b3:af:
32:b4:22:57:7c:fa:e3:47:d9:2a:0b:71:d9:8e:36:
eb:fe:50:ad:4e:7e:8e:05:64:6d:9d:87:9a:96:37:
28:6e:58:37:53:51:f3:ed:a8:c4:bf:dd:5e:e0:14:
33:be:29:61:50:87:b8:a7:23:cb:37:7e:30:d5:c7:
75:b0:66:96:bc:d9:18:7c:99:17:c3:76:10:86:bd:
eb:9c:b9:8c:41:90:80:e1:1d:31:39:08:f3:c9:b1:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:55:70:A0:20:F3:7D:AC:AA:60:13:30:C2:20:9B:14:EE:BE:8F
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:9f:8b:db:8f:64:cb:10:c8:56:d4:8c:1b:fc:87:f7:bc:
2c:30:ce:3f:a0:f0:5d:20:e7:a3:88:f0:78:68:b5:a7:91:67:
26:fc:63:10:1e:56:0a:cc:15:04:bf:c2:1d:95:d3:05:02:05:
a8:ae:fb:59:4e:86:a0:64:a3:ca:78:0d:47:cf:a6:bb:78:c6:
a7:b6:f5:08:dd:bb:d3:2e:2d:25:c3:a4:be:25:15:0c:b0:d3:
aa:88:6b:75:47:a4:d8:d8:97:37:11:dc:c3:a6:75:7c:e6:58:
f7:71:18:25:81:a2:ff:a7:c6:14:75:82:4b:b4:19:e3:93:68:
d3:2b:e4:bb:c9:09:76:ea:0f:86:a1:c3:12:74:6b:75:6d:7a:
c3:63:57:cc:ae:61:f8:e4:1f:33:c9:5c:7b:59:bd:15:e0:c4:
a3:e9:31:22:d2:6e:c9:a8:0b:c6:f1:0d:74:ca:e0:23:76:a7:
f1:fe:4b:7e:f0:42:09:4a:1d:90:b2:0c:d9:71:d6:0b:a0:bf:
c9:e3:43:db:2c:60:1c:83:39:2a:49:28:ad:d2:b2:bf:31:6a:
55:8c:f2:95:6c:44:e5:8c:0c:0f:22:cd:73:9e:a7:be:29:9e:
8e:5d:95:ba:83:b0:8d:b4:7e:26:f7:0d:8f:b3:c5:bf:12:40:
02:fc:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:03 2025 by rpki-client