Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: qiBWke8/ou07Ka3A8CqoIuDYZpFG7VZtp3Noq06PWEc=
Subject key identifier: 40:F8:26:B2:9C:E7:41:5C:DD:62:2C:6E:AE:3B:1A:63:12:A7:D6:8E
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 0194BD4E73F20F3B2716652E0D1A41ED5803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: HqDAf8kxnHB52Go5HQle5OPSFMs646Ina1BNPL0yD/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:f2:0f:3b:27:16:65:2e:0d:1a:41:ed:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=40f826b29ce7415cdd622c6eae3b1a6312a7d68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:a1:07:c8:13:df:c0:70:fa:e8:86:b5:1d:
c1:32:aa:f0:20:78:e9:07:5a:05:7b:47:4f:bd:d3:
ce:a2:46:62:50:cc:be:ac:ec:b1:a8:0e:b8:c9:20:
68:1e:9f:70:81:ae:c5:59:dc:ea:10:22:25:03:09:
32:c6:d4:fb:f0:6e:ca:f7:e6:63:22:46:da:01:b9:
b0:b1:c4:50:a8:64:61:bd:57:c1:d5:c5:c1:ec:77:
e5:74:3d:d1:0e:f3:58:1c:0c:89:0d:bd:6a:39:89:
71:16:48:ce:4d:b5:57:ce:c3:fe:80:5b:93:81:5d:
09:82:68:62:b1:6f:6a:8a:e0:ae:bc:d9:66:ad:4d:
58:4b:24:96:00:7e:2d:85:41:c5:1d:09:15:cc:2c:
10:fd:84:a0:56:41:08:02:dd:84:be:d6:2c:2b:18:
f4:e8:7f:2f:30:60:0b:06:41:9c:9a:c6:07:a3:5c:
f0:83:1a:2c:3b:aa:e7:f3:a8:e0:26:91:fd:81:4b:
16:3f:a5:c4:8e:d1:42:cd:05:28:b0:35:d8:8d:8e:
1b:85:8f:cf:6d:aa:53:71:93:7b:c1:af:de:c4:fd:
1b:b2:58:a4:7e:a2:df:5c:da:8c:fc:a6:0f:4f:80:
f2:8d:78:19:fe:b4:e4:f6:d8:a0:bf:76:f4:82:9c:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:26:B2:9C:E7:41:5C:DD:62:2C:6E:AE:3B:1A:63:12:A7:D6:8E
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:46:03:40:1b:a5:a6:08:8a:34:f8:24:f5:55:bb:c0:95:57:
13:c6:18:a3:f9:d9:5a:6a:2a:13:fa:69:2e:af:d1:43:36:e5:
61:04:13:63:68:06:76:1f:1a:9f:aa:b2:42:43:a6:36:07:e7:
17:bc:1a:bc:8c:f9:5b:12:64:cf:85:7b:2b:0b:e8:bc:4d:32:
47:9c:40:4a:8a:3d:d3:84:fa:4a:bf:65:7d:be:55:57:d1:22:
9f:8e:c1:24:45:77:c5:31:32:f6:10:59:72:53:c0:35:da:3c:
4b:23:0f:db:1a:22:fc:cf:0f:a3:97:04:56:fc:17:84:ee:eb:
9a:34:00:ec:1e:14:fb:94:02:0c:fc:36:56:d6:81:5e:9a:c4:
0d:89:07:dc:59:02:70:85:8b:60:e7:a5:f0:0d:18:59:d2:53:
f3:7f:0c:c6:e8:86:a6:71:31:ae:b2:83:5b:e6:50:cc:91:29:
0f:c4:4a:05:d8:c3:65:62:0e:1e:a1:67:aa:eb:07:e8:0c:ba:
2a:fc:9a:34:ec:c6:94:46:9a:fb:08:c9:8d:f2:70:78:b4:13:
d4:9e:0a:c6:d6:85:45:75:05:9a:ab:7d:fb:05:f4:ca:e4:e5:
a3:42:9f:31:d5:f6:0f:a7:06:4f:12:a2:29:ae:48:5a:10:89:
8c:14:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:38 2025 by rpki-client