Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: ghhvy4o4pxElpU2Li6SY11sLxVeE5zgxbBgLmOje1G8=
Subject key identifier: 45:E8:A0:B3:F9:A8:E0:24:4D:81:48:AF:A7:66:4B:D0:19:1B:5E:AE
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0194BD4E5296837029AE582C47B33574AE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 86
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: PYAqmSXYJBX3yuCfRYXP/ntA3wIOSGzIMxn/iLsXtGo=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:96:83:70:29:ae:58:2c:47:b3:35:74:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=45e8a0b3f9a8e0244d8148afa7664bd0191b5eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:61:9d:2a:2c:fc:b3:b0:6e:43:e4:47:cf:
7d:fe:99:cd:fa:ed:ed:e8:f6:90:c3:eb:7f:b3:7a:
b9:d1:e4:da:fc:47:bd:9f:1e:d9:02:e8:64:e0:0f:
32:cb:9f:59:e9:ce:f1:11:cb:26:5f:fd:bc:d4:ea:
d0:b5:34:34:e7:5a:ed:38:8b:2f:4c:48:5f:54:44:
4a:2c:e8:4c:31:6d:f2:63:6a:d9:04:c2:a5:04:08:
cf:34:6d:1a:f2:44:6f:e7:b1:6a:03:8f:f1:2f:e5:
b2:a7:2e:6d:85:e1:bd:c6:6b:6b:05:2c:20:07:dc:
36:41:78:4c:19:26:f6:6b:a4:f2:a2:97:88:5f:dc:
23:51:2a:45:b1:18:5d:0d:ac:6f:21:17:f8:fe:9d:
80:aa:de:45:12:93:f3:2d:d6:6a:a7:20:de:54:1a:
02:54:70:d3:32:53:ef:3a:4d:0c:32:2f:c7:a2:03:
d4:38:4d:a5:3b:66:6f:68:59:d0:63:ad:93:16:c3:
4a:ed:e7:ba:30:ac:a7:8b:d6:3f:05:91:6f:78:e0:
27:e3:f2:e5:1e:b4:1b:96:90:ed:c9:e0:ce:3c:ec:
5d:10:b7:2e:c5:c8:58:11:91:9a:f9:85:9b:2a:4f:
f2:96:43:a1:83:57:eb:a9:1e:e6:90:55:2f:fe:8b:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:A0:B3:F9:A8:E0:24:4D:81:48:AF:A7:66:4B:D0:19:1B:5E:AE
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:79:05:5b:ab:e0:97:3c:9b:47:82:ad:1a:4e:53:5f:85:
1d:7d:39:b0:45:22:d6:e1:4b:f9:63:a4:8e:93:9a:2e:95:56:
94:ca:44:28:5e:84:51:39:34:16:de:e4:65:72:6a:04:8b:99:
9c:4d:16:3b:3c:17:f5:ea:97:fb:b3:48:95:cb:0c:b8:cb:8f:
38:30:c9:06:4a:fd:d1:e5:5a:72:da:50:79:d4:1c:d8:5c:af:
66:bc:46:3d:16:4e:10:60:e4:bc:20:bb:27:f1:ae:50:bd:c9:
1b:d1:77:f9:0b:2a:c0:59:90:06:3b:0f:8f:06:98:4a:16:9d:
7e:4c:d3:73:b3:8f:fa:31:2d:d7:ae:5b:6f:47:67:77:5a:39:
a2:7b:4c:9d:3c:76:3a:d8:cd:77:95:f9:f4:de:0e:1b:ea:22:
0f:ce:8a:f5:22:bb:a6:ac:6b:b9:15:2a:02:5f:c7:dc:62:6f:
5f:0f:c9:a6:30:08:9d:82:c3:48:aa:36:63:33:01:da:dd:06:
a2:1b:ad:05:48:5f:c4:18:b7:7c:d5:b5:bd:d3:7a:11:df:59:
a8:0e:e1:da:aa:e2:64:b8:7a:aa:54:e3:3b:c1:72:1f:67:1e:
ca:7f:b4:38:86:a1:28:83:0b:9f:94:25:79:72:54:0d:f4:15:
c2:64:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:56 2025 by rpki-client