Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: wzsJ/DKNmsYAQmbMY3vdTGuMRZ4raubxkq8ogLXkSnM=
Subject key identifier: 5D:A9:51:8D:2E:27:22:87:3B:5F:6E:7D:15:CE:39:1E:4B:0A:97:AD
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 0194BC3C864C6D895DA1FA02421525CCD4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 04F0
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: D7B5M0glu8XDJPQWvamy8OddvlBVRQjcCtAfCrQ4TvE=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:4c:6d:89:5d:a1:fa:02:42:15:25:cc:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=5da9518d2e2722873b5f6e7d15ce391e4b0a97ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:cb:01:65:6a:8c:9b:33:ee:85:cc:1c:97:
dd:bd:ef:45:6c:69:8d:93:1f:8d:48:cd:20:d2:95:
2b:08:71:e1:4b:2b:c1:2b:01:1e:34:ec:51:92:13:
a5:43:e9:5e:a4:9f:88:f4:30:c4:5f:66:a4:3e:60:
81:fc:95:95:cc:d5:a7:be:52:5b:ab:ae:f1:a5:79:
47:84:ce:94:cd:bd:ed:c9:88:25:da:83:8b:60:9f:
2d:61:90:72:a8:d3:77:5c:a5:f5:76:00:14:b5:30:
8c:8b:6c:02:c0:a1:a5:c2:1d:ae:f0:36:78:e2:3f:
c6:88:5a:fa:99:3f:b1:62:fa:6a:d8:fe:e6:0b:62:
3f:36:ae:41:fd:8e:a5:88:53:8d:aa:7e:0b:f3:64:
f0:f6:38:80:c8:03:fd:7e:18:31:1c:d2:c9:12:53:
3c:8e:99:4a:87:e8:05:89:a6:7d:96:ac:c7:cb:52:
f0:ed:2f:30:6f:c7:26:73:2a:48:45:6f:fa:76:54:
a2:d5:53:9e:c7:23:1c:10:bf:26:b8:14:f3:65:30:
fd:13:be:c0:51:27:a6:6e:6e:e5:d7:a7:bd:b9:85:
88:f7:e4:a9:16:34:39:07:28:ae:56:bb:33:49:d9:
b6:4c:87:38:b2:e2:85:e9:d8:3e:29:2f:4e:74:9d:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:51:8D:2E:27:22:87:3B:5F:6E:7D:15:CE:39:1E:4B:0A:97:AD
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b8:d1:1d:73:e0:57:1c:92:6f:a0:4d:e2:90:ff:3f:05:91:
31:90:96:fb:fe:15:d9:1b:17:67:8f:62:fc:7a:dc:9c:46:63:
b5:14:70:ae:cd:34:c1:e1:65:1b:54:02:78:62:9b:33:9b:19:
54:eb:fa:87:86:31:b4:0e:29:86:4b:bb:1f:cf:2b:88:ff:e8:
74:b0:31:96:5f:1a:c0:6e:9b:b4:f8:0a:29:ca:5a:59:9a:e9:
2c:f8:96:8b:b9:3e:6d:df:1a:fb:d9:d2:79:c8:22:86:6f:a6:
ab:cf:73:6f:aa:c2:16:25:e3:73:7c:98:aa:35:87:94:a4:d8:
c2:01:e9:96:9d:48:13:a2:94:38:e2:dc:be:72:38:1f:dc:58:
11:d1:7f:ea:79:c6:1d:bc:b3:a2:36:5a:87:4e:a0:80:5b:07:
75:ce:62:e4:7e:07:8d:90:2d:e2:00:50:46:5d:3b:49:3c:7d:
41:b3:69:28:e3:38:dd:10:a2:57:30:d1:6e:ae:32:9e:e3:b0:
d8:e8:04:97:e6:2c:e9:d7:96:b4:f9:0a:e5:48:d3:de:bf:12:
42:8f:93:f4:e1:8b:8f:4a:7e:3e:e2:bd:6d:63:fd:dc:b4:7e:
38:6b:24:df:81:22:ba:f7:94:7c:84:63:da:af:b5:1c:fa:83:
1a:98:f2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:04 2025 by rpki-client