Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: hAGFEtnzDzwWUMceAf4QeQdzXv6ysZBm1fu5fHM7z90=
Subject key identifier: 4E:20:22:DF:83:48:DF:D6:B1:99:9F:16:DF:1F:2A:D2:42:6A:A9:3E
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 0194BBCF010DC7C0A91882B301481E691347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 09BF
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: F1ENRWt91YLjlfKz8GuOQvCfN+exOSa5l1UMJyXWKyI=)
2: fB_8Kj8FVwA_pRirxgUk8V0Sdls.roa (hash: goBjhg/MD5RTfp4bLaJFULnPwSaD80DrHVFmGJjDPXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:01:0d:c7:c0:a9:18:82:b3:01:48:1e:69:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=4e2022df8348dfd6b1999f16df1f2ad2426aa93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:67:0f:b9:c6:3e:68:fe:70:e8:3f:58:ff:
24:29:0d:ce:b6:e6:10:5a:38:33:1f:ab:a5:fa:d0:
1a:7e:a9:2b:b1:45:74:3f:f8:0b:57:f1:78:42:6c:
88:29:38:1b:f5:24:4f:26:f5:26:34:3b:a6:a6:1e:
71:b8:6d:12:5a:f6:4a:dd:12:4b:83:b7:0b:10:b2:
01:ae:ed:f7:c4:f3:bd:69:4f:78:a9:43:6c:34:3e:
c2:da:e0:de:f8:5a:b2:fe:03:f8:2e:35:76:c2:3e:
da:06:99:29:ed:a6:e5:27:5e:f2:01:c3:7b:16:69:
2f:21:dd:c2:1c:4e:23:c8:10:08:9c:87:c1:89:69:
b5:e3:44:f4:23:94:b9:36:e7:d6:31:37:d7:06:51:
ff:30:d8:96:3c:ef:70:16:f3:cc:8d:65:c2:8c:03:
c3:4e:3a:56:8a:25:39:73:7d:90:07:d1:87:c8:f7:
13:61:8e:43:5f:72:19:0b:80:a4:88:7d:9c:61:5b:
57:b5:b3:b1:dd:d4:4a:5b:3a:9b:bb:3d:41:ca:b2:
9e:b3:da:3f:2b:66:42:6f:ce:f5:f6:25:a8:52:03:
59:2b:2f:f9:b7:2c:dd:03:86:18:95:90:e8:33:06:
29:58:41:80:aa:9a:e4:ae:f3:ae:63:5f:d0:82:eb:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:22:DF:83:48:DF:D6:B1:99:9F:16:DF:1F:2A:D2:42:6A:A9:3E
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:37:63:c8:85:34:72:6f:f6:71:ea:19:a3:af:16:0b:11:43:
4c:d8:a1:b0:5e:e4:4d:d5:26:75:80:85:4b:19:87:59:e3:c7:
0a:bb:26:49:d2:36:8e:b7:9e:c3:da:6d:70:44:11:8a:94:6f:
60:45:f0:57:5b:72:85:bc:11:78:48:5c:3c:93:1e:83:26:1b:
99:4b:d0:2f:4f:8e:b5:42:c0:04:f0:ea:b9:52:f0:c9:3a:aa:
e6:a0:bd:78:a5:14:4c:e0:62:ac:ea:a4:39:e5:e2:22:a7:9c:
1a:c3:6e:e6:72:80:8b:24:60:7c:c8:5f:f6:96:b4:91:77:9d:
7c:a1:ee:d0:cd:21:5c:a1:12:d7:4b:72:e9:4d:ad:1a:9f:4d:
01:6e:ba:ea:d4:1d:e6:7a:fe:32:58:90:3a:ae:65:9b:ba:c8:
e9:0d:9b:d0:4f:de:62:58:3d:cc:1c:98:44:f3:64:dc:8b:93:
fc:f3:e4:d7:f3:b2:0d:de:1a:75:f2:da:1b:f4:60:52:2d:0a:
60:1b:bf:97:c8:87:85:1a:93:b4:8d:87:7e:b0:20:b8:93:83:
7e:94:01:67:f6:62:01:14:df:b4:22:9c:a3:39:9d:8a:59:cb:
e0:41:d4:f7:16:cb:20:77:c6:53:dd:c1:14:10:26:65:11:8c:
93:7a:e3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:35 2025 by rpki-client