Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: yxlZX6Z5bIBea8MeVsH4JN+04hNhCgZggRbukJdvPlU=
Subject key identifier: E0:DB:39:EA:84:7D:18:18:8A:BE:70:78:0E:B1:66:D2:FA:B2:D5:EF
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0194BD17F22E2F2FB06F0F7655F74CAEF7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: lwxT3iFy4W0fskdGIGXtAfTZUE2TdjfLa7Hk//Vl5LQ=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:2e:2f:2f:b0:6f:0f:76:55:f7:4c:ae:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=e0db39ea847d18188abe70780eb166d2fab2d5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:2c:07:2d:3a:98:2c:63:3b:94:1c:6c:6f:
8b:98:38:7d:46:da:19:58:f4:af:a7:1a:59:60:77:
fd:d3:34:58:5e:34:3e:23:60:c0:76:f4:f0:af:5a:
2f:53:51:91:6d:93:14:72:0d:55:3a:2b:31:0b:08:
13:66:24:12:41:42:f0:0c:1b:c6:31:1d:f0:f1:bf:
9f:10:e8:13:71:71:44:59:56:ab:0d:de:ae:36:e9:
7b:30:00:c3:3e:9c:40:ac:35:1a:f8:e3:4d:87:5b:
40:29:7d:cf:c3:89:52:17:5a:f6:0d:43:24:c4:31:
f2:51:21:90:ea:02:99:9a:fc:0a:4b:a4:18:53:8d:
88:8d:a3:fa:9c:42:82:10:32:86:48:dc:d4:f1:d5:
b3:c3:36:7a:ea:49:a6:7b:e5:74:4a:e6:c4:3b:cf:
09:c7:e0:8f:26:a0:0e:33:11:67:6f:87:d2:e1:3b:
3f:1e:b0:99:e9:fa:93:b6:3c:9f:05:58:90:10:ab:
c5:dc:85:47:f6:e8:25:ae:ea:8e:53:a0:76:ef:f4:
44:f4:1c:c6:4c:85:75:9b:5b:2c:83:93:10:4b:a5:
42:4d:dd:ea:89:2a:fc:2a:4a:52:8a:8e:e2:4d:60:
fa:71:ee:f8:79:a2:11:94:ad:c0:f5:71:ca:4a:3a:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:39:EA:84:7D:18:18:8A:BE:70:78:0E:B1:66:D2:FA:B2:D5:EF
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:e4:6e:ec:ae:e1:92:03:fd:2a:2e:ac:85:a3:7a:69:09:
1b:8a:c5:74:90:38:97:66:e7:44:cd:62:ee:c6:33:07:21:ed:
14:68:4f:d4:47:ab:99:ff:97:b2:73:78:bd:f0:88:c2:27:18:
d6:71:d3:a9:05:d8:29:99:4c:80:65:49:79:eb:d9:dc:aa:76:
24:2f:98:44:62:b1:f3:18:25:fc:eb:8a:0e:c9:31:be:cd:d5:
16:11:b3:e0:a7:30:12:1c:5a:77:5b:3d:6f:d7:67:48:49:b9:
c5:41:06:8b:af:67:47:6a:9b:49:7f:72:a2:5d:da:f3:99:59:
58:1c:2a:8d:53:5c:ed:77:2c:08:ab:41:57:cd:85:6b:15:5f:
3f:a5:b3:3d:92:ed:54:f7:3b:75:03:0e:29:85:cd:c7:cf:08:
62:47:0a:97:2e:2a:be:db:60:76:c4:62:ab:70:b7:6b:e5:5d:
d6:c7:0b:ca:55:67:7b:44:c7:ae:cf:74:58:a0:2e:c5:cd:38:
70:a5:42:96:86:f9:45:77:05:f8:42:de:eb:03:1b:66:64:a5:
05:b9:74:e9:de:77:36:ff:c5:c7:f5:6f:bb:92:62:7e:93:33:
20:c3:74:1f:b4:5e:f5:37:83:7e:b2:fb:57:1f:53:31:62:49:
d5:88:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:08 2025 by rpki-client