Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: SCsei2n5x6AYiFTgzTIB5ok2fKIEm0YwASW/TMpQmEg=
Subject key identifier: 38:C8:1C:32:EA:4F:EB:CA:E7:C7:CB:E0:C1:10:A8:A5:9D:1A:7D:6C
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 0194BC04ED7FF8211A4BA366605FC2A03F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1105
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: kwJ1DUAL5q9GHEkoVAcJSabgg1TIX0U3qHy852/b9NE=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:7f:f8:21:1a:4b:a3:66:60:5f:c2:a0:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=38c81c32ea4febcae7c7cbe0c110a8a59d1a7d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:51:40:36:57:66:ad:0e:39:ab:6d:11:3a:
a8:a2:70:94:d6:0c:fb:21:4c:1a:c5:00:6a:5f:f1:
71:2f:67:49:09:28:fd:0a:8e:9c:09:bc:f9:ef:43:
e2:14:72:8b:c9:01:ce:35:4a:b2:63:21:60:e1:b4:
e5:e5:cf:7f:94:50:26:1f:c7:01:05:14:86:2d:01:
4c:95:1a:8a:a7:14:59:9f:6a:87:e1:1b:dd:71:7f:
1f:f2:be:f9:cd:c8:16:f7:d3:e3:22:85:66:cc:90:
43:6b:e9:af:11:65:d7:f1:c3:f1:be:89:00:37:7f:
e3:c8:97:e9:ae:6c:60:f2:e7:5f:6e:99:9d:bd:8b:
c7:9b:ff:0e:34:c4:67:ad:5b:a9:fd:db:ca:bd:1e:
e0:76:1b:e6:78:5e:1e:6e:85:c5:81:ee:09:e1:94:
1d:ac:13:d0:3c:3a:42:bf:7e:05:9b:61:07:ed:6f:
e8:5c:e7:44:83:ef:6e:36:4c:4d:55:84:ea:c4:7b:
a9:a4:96:fb:26:1e:97:2f:91:31:cd:8d:f1:ef:88:
2e:35:cf:20:5e:ba:b0:f9:15:38:47:e4:60:59:8f:
c6:e6:5c:ae:92:cc:01:e4:e2:44:f1:50:d1:38:34:
1a:22:42:5d:d5:58:a3:f9:34:63:78:45:20:ae:d9:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:1C:32:EA:4F:EB:CA:E7:C7:CB:E0:C1:10:A8:A5:9D:1A:7D:6C
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:9b:dd:36:b5:52:8b:ab:20:e1:70:1c:c4:07:b9:18:96:
ec:eb:67:81:94:ad:74:e8:b6:15:2d:e1:5a:48:b6:66:53:7c:
03:05:a6:0e:c2:93:ff:e5:85:0f:fc:5a:50:43:56:ad:de:07:
ea:73:09:c1:09:7b:5b:d8:37:61:7b:83:b4:ed:0b:5e:1d:c0:
a6:4a:8f:37:91:c2:0d:69:34:d9:27:31:c2:d7:20:9e:21:cf:
d7:b5:6f:72:31:2d:94:c0:8d:96:95:03:35:90:5e:ad:e8:02:
18:37:81:12:e1:a0:62:08:22:59:9c:fd:17:f4:de:bd:4f:d6:
fb:b5:2b:0a:3d:a1:7d:ae:9d:43:af:b5:d2:19:d8:aa:56:f4:
9a:64:8d:9f:27:83:fb:12:ea:76:bc:a1:fe:0e:44:55:ef:87:
e6:33:8d:79:89:a8:39:53:5c:27:ac:df:10:d1:e2:0c:7a:8c:
d1:0d:a1:a5:32:0f:77:d1:dd:04:5d:f6:f7:93:44:ca:f3:3d:
45:17:77:62:a5:18:af:3b:de:17:67:7a:65:6e:5a:39:3f:70:
60:f3:b6:42:7a:c9:bb:d6:f7:c9:f7:48:3b:7b:7c:7b:d0:d4:
2d:27:21:43:0e:0c:c2:57:d6:27:56:b1:d8:73:ad:a9:d7:df:
24:f4:1e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:26 2025 by rpki-client