Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: nW/okQo+1YWLin7hq0iLLnJVvXvNzqdZUsqkRoHiisQ=
Subject key identifier: E8:2C:68:F9:1B:D8:4A:46:FD:8E:20:20:AF:E6:FE:4B:91:46:21:8F
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 0194BD4E8A7E8B5431DDCB94B1EDCCEF4486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 135B
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: lMCsJ8FH3A61b3HUl4jszjOYZQ3G3BA3hzj1GmKUfig=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:7e:8b:54:31:dd:cb:94:b1:ed:cc:ef:44:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=e82c68f91bd84a46fd8e2020afe6fe4b9146218f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:fe:a0:03:e8:93:d0:c7:eb:f8:8f:a3:69:
5c:52:56:48:79:c5:4d:f0:98:7c:30:49:6c:45:06:
d7:4d:d1:b8:60:9d:09:c7:61:37:fe:c4:27:cc:5f:
ab:7b:a1:78:65:35:d1:cc:2f:14:4c:11:09:61:17:
11:40:26:f7:26:7f:8e:a3:47:ba:a4:4c:7b:45:3d:
9f:91:ae:89:ea:3a:8e:29:9d:55:cf:39:b2:0d:93:
24:0d:3a:5d:71:37:64:93:49:2b:62:11:9b:e8:fa:
5f:54:f6:82:ab:e9:97:18:0f:21:51:f6:40:39:33:
53:cc:3c:62:aa:b2:2a:6c:25:08:24:81:24:bc:9a:
4f:a9:a6:92:5e:f7:f8:b3:b8:54:97:f0:c6:80:c2:
b1:88:f6:fb:aa:75:c3:28:50:c7:dd:67:4d:db:74:
cb:dc:1b:c0:1b:14:e4:de:b4:44:ca:72:9b:77:67:
35:f4:50:2c:94:b6:56:e6:ef:6d:82:19:16:98:e1:
87:49:00:25:96:65:3e:54:80:e8:3f:bf:61:af:57:
79:b7:d4:f8:22:9f:30:9d:0b:3a:09:13:0c:86:25:
9a:40:54:c9:64:4e:60:c9:d5:7b:2d:9e:a4:24:7d:
c9:04:f3:43:1c:bf:bc:6c:ee:a8:cb:78:bd:c1:e3:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:68:F9:1B:D8:4A:46:FD:8E:20:20:AF:E6:FE:4B:91:46:21:8F
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:12:96:51:97:d9:9a:90:73:f7:11:e2:91:ef:1d:9a:99:72:
4a:e8:3f:b2:a7:a2:d3:6e:b8:c4:e7:59:e0:7a:8e:3c:aa:b0:
3e:81:62:36:13:74:2a:71:33:04:41:6c:1c:fa:a7:5b:26:05:
4a:31:ea:21:c5:79:5b:d1:90:c1:f6:b5:95:ef:f8:51:14:87:
62:15:d9:a8:12:ce:41:ee:5c:89:2d:17:a6:f3:83:31:9d:e2:
43:e9:6b:ef:52:ba:78:6c:b1:0c:51:69:ba:71:42:18:69:c1:
3f:8b:8a:74:ef:36:9f:55:3d:aa:05:c9:4a:e1:ca:76:6a:40:
6f:df:bc:02:6d:13:96:61:94:fe:5d:28:63:8a:80:73:9e:ae:
40:36:a8:3d:e6:87:fc:74:f9:d3:d1:48:7b:4c:65:93:61:6b:
f2:29:7f:66:08:43:3d:41:91:98:64:94:bc:ef:ce:9f:24:21:
f8:89:bd:37:fb:8f:58:a2:e5:ff:e7:03:6e:08:2f:96:9b:6a:
25:4e:38:99:38:59:44:d0:25:d4:6f:74:31:84:a5:75:96:c7:
95:40:d8:13:dd:d3:1c:11:07:a2:fe:f8:fe:dd:23:9b:27:ae:
47:79:1a:d8:02:a5:e6:04:89:f1:cb:03:f2:56:0e:65:91:f4:
be:14:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:42 2025 by rpki-client