Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: 4RcS4clHTekx6J7xYQ1dGmM5mBKIuK2P7auSB0M3JcY=
Subject key identifier: 05:B1:B4:60:28:69:6C:9A:59:2A:6D:37:B4:20:5D:E8:27:6A:07:46
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 0194BD4E85E92A5AE97E84FDDD5509CCA2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: YYEb4Fye9d8tjW76c7x+S5Ud7TO8gIRpOTWq2G/1dPQ=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:e9:2a:5a:e9:7e:84:fd:dd:55:09:cc:a2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=05b1b46028696c9a592a6d37b4205de8276a0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:71:f3:26:d5:57:f8:df:fb:20:80:1d:73:
0b:09:37:56:bf:1d:ad:ba:39:49:e0:a4:8e:f2:62:
d0:1c:81:f3:d4:fc:b1:2e:56:1c:f7:22:88:4b:43:
cc:92:65:bf:8e:a0:f3:ef:82:c0:42:a3:af:26:7e:
96:78:0e:3d:91:5c:87:a7:5a:32:34:3b:fd:32:e7:
e6:d2:65:c3:9c:2e:56:e4:e8:7a:2b:28:4a:1d:bb:
f6:80:18:fa:bc:1b:f5:f3:6c:8a:a5:d4:8c:b4:a5:
ec:82:a0:d6:72:c7:cc:07:6c:fe:16:db:2c:6f:3b:
9c:a2:a7:3d:01:4d:20:ee:77:d0:37:eb:b8:ec:0f:
3d:75:de:43:f9:7f:c0:81:dd:a1:b9:45:40:bf:01:
1a:f6:9d:52:12:4b:f7:f9:40:a7:12:00:f6:27:e6:
94:87:7d:c8:a4:c2:52:1f:98:d9:9a:0f:cf:67:c0:
a8:77:58:cb:a9:14:5b:5f:ea:d7:02:5b:33:18:6e:
26:8c:ee:be:87:a5:70:e3:82:3c:4d:16:38:7b:c6:
bd:3d:e0:8a:43:b2:60:6b:cb:dd:24:f6:a4:10:4f:
74:09:97:85:8a:4b:dc:0a:1b:58:5d:73:3a:f2:b6:
a4:b7:4c:01:92:59:90:0c:e3:8f:fa:a4:d0:2a:e5:
1e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B1:B4:60:28:69:6C:9A:59:2A:6D:37:B4:20:5D:E8:27:6A:07:46
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:80:c9:88:d9:b9:c7:72:63:ea:00:0a:15:77:b7:d7:58:
38:76:94:83:57:71:0a:ac:19:83:bb:e1:9c:49:8a:b6:09:e1:
26:d7:ab:6b:eb:20:f8:d7:3a:c7:7e:06:ca:3a:92:fb:db:43:
c4:ba:7a:ee:9a:63:04:fe:e5:44:c1:bc:fb:b2:65:b0:00:63:
72:90:fa:77:c0:8e:65:dd:34:06:bf:5a:48:55:83:80:fc:c6:
eb:59:0f:77:7a:50:db:04:79:02:c1:17:1b:58:e3:8d:86:66:
15:72:a1:a4:08:38:31:8e:0a:92:c2:41:20:3c:d2:35:c9:cb:
ae:5a:d8:55:f7:30:01:fb:cb:5a:f3:c1:0c:66:5d:68:29:ba:
46:a4:27:87:7d:9f:97:19:a7:bb:86:cc:e3:2e:07:3c:73:56:
a3:8e:b3:a9:67:07:30:06:ae:f7:60:d6:02:98:1d:ce:17:7c:
b1:58:f3:25:a6:ca:02:27:2b:b4:69:0b:49:33:91:6e:26:e1:
92:6d:c4:07:42:33:7a:75:71:2d:04:c6:f5:23:a2:3c:bb:cb:
fe:12:85:c8:3b:07:f1:c0:dd:63:52:f7:6b:df:b6:18:9d:08:
f9:34:3f:7d:04:d3:e8:32:82:5c:d9:ca:fd:bc:8f:83:f0:ea:
7d:44:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:24 2025 by rpki-client