Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/878e7c-34f5-47cb-a7e1-8042d6f4bef1/1/QTKoayl3h-SMVXBZMe05NR-EFxo.mft
File: QTKoayl3h-SMVXBZMe05NR-EFxo.mft (raw, json)
Hash identifier: ksrCJpUnmzf3HCNI5deWwQyiyH5vqybPWWsxhp4/FjM=
Subject key identifier: B6:7C:81:5E:66:64:65:93:F4:13:99:5C:0F:B0:D2:C6:FC:5A:26:F1
Authority key identifier: 41:32:A8:6B:29:77:87:E4:8C:55:70:59:31:ED:39:35:1F:84:17:1A
Certificate issuer: /CN=4132a86b297787e48c55705931ed39351f84171a
Certificate serial: 0194BBCE4C348B559FCCF7AA337FB8D9BC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTKoayl3h-SMVXBZMe05NR-EFxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/878e7c-34f5-47cb-a7e1-8042d6f4bef1/1/QTKoayl3h-SMVXBZMe05NR-EFxo.mft
Manifest number: 0E10
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: QTKoayl3h-SMVXBZMe05NR-EFxo.crl (hash: SbYaamvlKSK09lVleJXCvaEsUkMVQlvhz5Tz8vFoHoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:34:8b:55:9f:cc:f7:aa:33:7f:b8:d9:bc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4132a86b297787e48c55705931ed39351f84171a
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=b67c815e66646593f413995c0fb0d2c6fc5a26f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dc:f5:02:c4:28:2d:c2:98:82:c1:83:c6:9b:
e6:be:69:90:68:98:66:f6:f2:d1:0d:20:20:14:00:
bb:f6:52:04:0b:cd:5b:ab:56:c9:d9:c7:e4:d0:66:
9f:7c:e9:a4:ea:4b:d0:f2:b3:00:14:a1:8a:ed:30:
7a:89:f6:75:5c:ff:a5:71:7e:92:bc:44:ec:99:da:
74:24:7c:ba:35:f7:55:ec:72:ed:46:e4:e6:41:29:
7a:1d:69:81:7c:d4:a6:a4:e2:9b:3b:f0:11:e0:db:
86:43:24:4c:f5:91:16:7f:05:84:a5:12:13:f2:27:
5c:80:9f:a7:d2:3c:63:f4:b1:f6:90:64:e6:31:d6:
5c:1a:23:2f:2b:83:82:20:15:31:ee:22:60:1c:bb:
21:9b:f3:28:aa:56:c3:19:b3:9b:fb:b6:43:d1:1c:
c1:72:26:05:72:9b:0d:7b:f6:58:59:e4:ce:4f:6f:
e0:a0:ef:b4:82:dd:4c:79:d5:2d:3b:25:f0:1c:26:
76:ea:43:fb:de:cb:81:fd:26:3d:39:dd:f9:48:33:
7a:6c:95:63:29:0c:9c:a1:79:d2:84:f3:03:6c:c7:
9e:87:20:aa:e8:c0:c0:35:06:ae:57:29:32:67:c2:
02:5d:c0:1a:88:2f:02:8c:b5:1a:16:1f:5e:f1:a1:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7C:81:5E:66:64:65:93:F4:13:99:5C:0F:B0:D2:C6:FC:5A:26:F1
X509v3 Authority Key Identifier:
keyid:41:32:A8:6B:29:77:87:E4:8C:55:70:59:31:ED:39:35:1F:84:17:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTKoayl3h-SMVXBZMe05NR-EFxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/878e7c-34f5-47cb-a7e1-8042d6f4bef1/1/QTKoayl3h-SMVXBZMe05NR-EFxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/878e7c-34f5-47cb-a7e1-8042d6f4bef1/1/QTKoayl3h-SMVXBZMe05NR-EFxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:72:3c:2d:e5:b1:b7:bc:d1:51:96:8e:59:f1:8e:5c:7a:f7:
f5:ab:cc:da:d5:16:5b:4f:88:f5:48:b0:d5:17:c8:7c:9a:3e:
4a:3a:14:cc:93:e9:a1:f7:34:2c:2e:05:ec:1a:92:85:6b:fa:
e7:ac:d0:cb:d4:63:70:9c:4a:1e:2f:fc:94:8b:6b:7a:15:76:
32:38:92:c1:5c:dd:96:71:35:23:b3:5b:36:fa:3b:5b:32:2f:
75:9d:fb:b9:72:0f:45:43:2f:79:46:68:2b:91:3b:74:67:9f:
ae:f3:5b:5f:11:bd:a4:b3:37:2a:46:c2:cf:a6:fc:78:51:25:
c2:65:d1:42:1e:db:d4:2f:3a:e5:e0:3f:c1:47:37:94:e0:1a:
97:84:91:83:61:a5:6d:08:bf:82:c1:f4:8f:90:1d:ac:2d:39:
32:34:6c:df:5a:6e:29:a0:71:47:2d:42:24:57:f4:5b:c2:fd:
9c:63:0c:1c:41:41:d1:95:6d:3f:c0:16:79:2d:69:bd:97:80:
a4:7c:e0:33:6b:6a:da:26:4d:fe:e5:e7:05:9f:4e:59:b1:29:
67:d1:67:2a:94:61:0d:b9:06:3a:a7:f6:71:6b:6e:71:a2:b4:
0a:de:3b:d7:77:bc:c6:6b:01:37:75:41:91:77:cd:75:1a:fb:
3b:f6:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:51 2025 by rpki-client