Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: j//dUxQeD0MAeEuvhYbZvCyCAt4+/ZUjT7QZo1QXw2M=
Subject key identifier: A5:D4:34:63:B5:D8:9B:E5:AA:92:A4:F3:1E:D2:6D:E3:3F:97:15:93
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 0194BD17EFBDBC22D3F01B0D290ECF0EBBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 1013
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: ALqM1GfWnhCG672Voik5aB8GCmi+6yntwL+w5o3GU/A=)
3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ef:bd:bc:22:d3:f0:1b:0d:29:0e:cf:0e:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=a5d43463b5d89be5aa92a4f31ed26de33f971593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:21:c3:ba:30:43:ce:36:af:0e:00:fa:2d:
86:a3:c2:0c:07:57:d0:83:27:d5:24:ac:d1:33:cb:
58:7f:75:6c:32:ea:f5:82:d7:02:58:55:ce:eb:d3:
c8:08:ca:fd:61:a8:e2:a7:01:ce:50:fe:be:4a:49:
0e:4d:da:50:83:27:2d:f4:5c:1f:74:9e:e1:fd:f6:
f8:b1:eb:2b:f7:a9:c7:eb:52:d3:66:30:59:18:f4:
5c:ef:de:30:10:67:4d:65:11:0a:d7:17:c5:95:ba:
fc:95:49:31:f3:eb:7d:cf:58:27:e7:2d:a8:23:c8:
b3:80:d7:d3:d1:f5:22:c1:32:58:25:fe:72:dd:f9:
96:55:30:a5:4b:f9:ec:33:46:a8:b8:40:ff:df:d4:
5d:b2:18:34:17:34:8c:50:6a:48:a5:8b:4b:ff:f7:
d3:a5:5c:d6:15:45:f0:e8:aa:8b:43:23:42:eb:6d:
46:7c:67:3a:bb:de:15:e5:ee:90:0a:48:78:d0:d2:
f8:08:48:c2:4f:3a:93:45:55:67:16:54:7f:67:37:
ff:bd:b6:8f:7c:6a:41:47:36:1b:70:de:db:21:21:
bb:09:0b:07:29:b5:bd:d0:e5:ed:78:19:ff:bb:2f:
ee:09:47:b7:e7:d9:22:52:52:86:27:99:26:9e:28:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:34:63:B5:D8:9B:E5:AA:92:A4:F3:1E:D2:6D:E3:3F:97:15:93
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a5:ed:41:0b:3a:67:24:a4:78:8b:b2:36:34:65:cd:3a:00:
b3:5c:35:77:f2:a1:95:7e:7a:74:b0:bd:9b:f6:c2:d6:d7:6f:
3d:b8:63:94:6b:2e:bd:97:ed:b9:39:ac:0e:d5:75:36:f4:e5:
4b:c5:be:4a:4f:9d:d3:f4:7b:71:0d:b2:dd:fd:a8:59:73:82:
52:60:8c:b7:2b:9d:51:c4:05:77:7c:92:63:a7:fc:43:33:ec:
42:b8:ad:57:06:89:db:08:34:2f:d9:1f:59:18:bc:b9:ac:64:
5a:14:02:39:1a:57:33:18:73:7d:86:cb:21:de:37:3b:44:c7:
fe:e3:ec:05:9d:92:65:f1:1a:7f:4d:60:cc:54:a6:c5:ed:ff:
3e:a8:61:52:8e:66:54:0d:31:73:0b:7b:a8:6a:28:07:7e:d0:
65:b2:3b:22:d6:ce:45:84:f7:fd:f4:75:f3:69:2b:ab:c9:61:
0e:ec:3f:ee:16:71:09:33:a2:9a:3d:ad:c9:71:99:aa:aa:a0:
51:e1:b8:1a:5e:a3:56:d7:96:fc:fd:06:be:34:6f:bc:aa:61:
b4:46:96:db:5c:5c:3f:91:de:75:71:9d:0b:f2:ee:f6:d2:82:
2d:27:b7:58:b4:be:ca:e7:b1:45:e4:9a:39:27:a4:e3:e5:bb:
99:c9:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:26 2025 by rpki-client