Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
File: QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft (raw, json)
Hash identifier: RmJWXF0DC1IAWPtma1LmSVmlDxCjdVsZ0wt2o0OCGuw=
Subject key identifier: B0:34:20:30:48:25:7C:DB:61:98:CD:11:E4:A2:38:4D:12:59:AB:3A
Authority key identifier: 41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
Certificate issuer: /CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Certificate serial: 0194BC04E4936BF198E40C51C56FED2F8926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
Manifest number: 0E58
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 4ylLEVDeXKrfF8Se5wkM9llLd1w.roa (hash: 4hQQfVDyFUxXBSnxIrSQDsLfslrlkzzZ+2tzn4mkErM=)
2: QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl (hash: cTyF/RW3HS2YzBWCmua+bHGQQHTjbMXS485HQAtAwkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:93:6b:f1:98:e4:0c:51:c5:6f:ed:2f:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4148cbad1748205b4f4334bba638c64c2b21fc0e
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=b034203048257cdb6198cd11e4a2384d1259ab3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:42:18:4e:f5:83:10:2f:c0:48:29:c5:95:
75:e5:4a:c6:9a:ed:45:1a:91:43:a4:be:e5:3b:16:
f6:66:06:e5:10:80:39:18:88:be:54:3e:32:a6:7d:
ac:1e:00:4c:30:33:8b:ad:ba:e6:bf:b1:3f:c4:53:
92:1e:a5:a8:d6:a1:1a:60:06:d0:84:33:8e:8c:69:
21:94:c9:8d:07:3c:b6:a2:4e:f3:65:a9:03:9a:82:
e5:5d:3b:5d:b3:92:ab:bd:38:2e:a8:09:73:d4:02:
d8:19:eb:6b:6c:1a:9d:7e:01:8d:af:5a:d9:01:70:
a4:8b:12:b7:5b:f1:75:49:6f:e0:44:9a:94:ed:5d:
af:e0:0c:21:41:b3:39:13:73:57:35:df:8c:8d:8f:
10:a2:5d:69:70:80:f3:d8:6c:24:8d:38:0d:84:26:
83:da:ec:6d:da:64:4a:d1:5c:b7:0b:99:5b:27:19:
ad:f3:2c:95:04:4d:48:ca:21:ea:8b:38:b4:f6:58:
a2:8f:9e:31:96:d4:73:31:28:4a:68:0a:8a:5d:5b:
e4:13:47:ef:3f:a3:48:3a:d7:04:1e:aa:fa:80:35:
9b:fa:4a:5b:c5:9a:52:ee:01:1f:63:1c:98:45:5c:
79:a1:3e:29:a4:cf:95:a6:43:45:f6:8a:c6:75:81:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:20:30:48:25:7C:DB:61:98:CD:11:E4:A2:38:4D:12:59:AB:3A
X509v3 Authority Key Identifier:
keyid:41:48:CB:AD:17:48:20:5B:4F:43:34:BB:A6:38:C6:4C:2B:21:FC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUjLrRdIIFtPQzS7pjjGTCsh_A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ce21b3-c4de-456d-b538-97975d34fc6c/1/QUjLrRdIIFtPQzS7pjjGTCsh_A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:bc:73:ff:3d:b5:c2:c8:88:6c:f0:72:b1:6f:38:84:6b:
81:ba:c9:0c:c9:91:d8:75:7d:e5:67:f9:81:0f:95:58:90:6b:
e4:be:75:88:58:71:5f:30:cc:ba:db:88:8c:0d:73:1f:24:66:
ff:1e:1a:25:17:29:63:95:d1:96:f4:d1:8f:48:c6:9c:3a:71:
44:c2:2e:e7:5c:82:67:a8:82:45:28:46:a9:e7:97:e4:6e:30:
2f:e7:df:6f:38:c4:11:c0:4e:3c:f5:89:48:69:da:54:5d:81:
eb:91:aa:b2:98:52:59:ff:88:43:70:45:b3:cd:d5:e7:18:4c:
34:8b:d2:7c:86:95:d9:79:4d:c6:c0:a6:8b:1b:6d:95:6b:8f:
6f:b7:58:f5:62:8a:e4:e4:d0:53:0b:24:98:6e:39:df:6a:99:
1a:a7:49:8d:cb:ca:00:17:3f:5f:d5:b1:83:ad:93:fc:42:df:
e8:ef:fb:29:63:e2:96:3d:cb:68:9a:b4:92:b8:89:e2:65:17:
3a:9c:d0:48:0b:1b:40:48:04:81:6d:a0:ae:e6:20:53:54:fb:
30:04:a1:5f:74:1f:70:0a:a3:f5:d0:d3:80:57:b0:e5:6d:3c:
7a:d0:63:ca:22:0a:ec:ec:70:1a:56:7f:73:2e:f2:81:91:56:
b7:78:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:18 2025 by rpki-client