Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier: IqHQLChrBwA5KF5fyG9DueClrcW6FuCtsTfTO9WtRIg=
Subject key identifier: C1:4D:F0:B0:89:66:AF:0C:8A:67:86:20:4C:88:8E:31:F9:FF:BF:8C
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 0194BC72FC3471A2DE40531389135F926181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: pB4yRs/lDyOMALI5O2J1aXrZcoIR2paucsGNjWQXMyE=)
3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:34:71:a2:de:40:53:13:89:13:5f:92:61:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=c14df0b08966af0c8a6786204c888e31f9ffbf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b1:68:44:a6:88:61:6e:24:e0:83:0b:ce:3c:
6b:2b:e7:2e:e6:17:16:43:6d:0c:6d:5d:cc:2a:d9:
49:b6:6c:3a:b0:49:78:2d:88:32:99:21:da:98:12:
df:2e:c7:4a:87:dc:83:cd:27:ce:73:d7:5b:f2:f9:
31:30:9b:a2:09:fb:bd:5d:b5:fb:e2:a5:1e:ce:af:
0b:9a:0b:26:65:ae:e5:a0:b5:bf:fa:a7:7e:71:64:
26:9b:3e:99:f7:df:4a:61:8e:d8:4c:cd:b9:ef:b3:
13:85:03:b3:de:7f:0e:8f:98:38:33:95:ba:a3:fc:
eb:82:2e:52:02:4f:c2:56:f1:be:7d:0c:5d:17:36:
4e:f6:eb:2d:85:8a:d7:29:b4:04:40:74:e5:b9:92:
da:19:9d:90:29:ea:75:d3:0b:1c:9e:72:7c:9e:f8:
84:12:a3:d3:a3:ba:00:f7:49:de:89:64:07:dc:cd:
a5:c8:6d:99:ba:00:53:4c:0a:76:7d:77:22:07:cf:
08:c4:7f:87:2a:86:c1:32:9f:38:43:6d:90:7b:a2:
20:76:d8:8f:2a:2a:3c:84:cc:5a:1c:a7:e8:15:3a:
77:46:10:1d:19:97:77:43:29:05:1d:bb:07:45:03:
09:27:8b:db:96:8d:75:6c:8a:d2:8c:b6:38:91:76:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:F0:B0:89:66:AF:0C:8A:67:86:20:4C:88:8E:31:F9:FF:BF:8C
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:df:80:9f:c5:19:92:5f:d0:d6:fe:2a:8a:1d:f1:ea:ca:42:
ee:8c:43:32:fa:92:32:d3:e9:27:a2:33:79:6b:a2:c0:08:c7:
d6:d2:06:fc:f4:86:6c:e9:c9:7b:0a:dd:18:71:c7:d9:e0:2d:
15:cb:77:59:7f:c6:6d:0e:6f:1b:d0:02:46:ae:cb:86:e4:c5:
e7:8e:95:e6:9f:e3:e9:79:34:ff:64:7c:83:bd:80:44:9d:cc:
61:cd:ab:ea:70:b3:4e:6c:ca:26:53:c1:2e:86:f1:bc:6a:62:
1f:30:df:72:e7:27:9b:50:66:7f:f3:1e:a7:86:e3:ba:33:d4:
b5:7b:43:fb:30:9a:34:aa:fa:b8:1c:d7:8e:75:9f:11:e7:a5:
1a:cc:cb:0f:32:b3:9f:0c:c6:70:86:37:dd:b7:06:ea:43:dc:
d6:1d:60:4a:c7:53:89:a4:5c:fa:cf:b0:21:7b:ff:32:e5:18:
01:59:3c:94:ef:e2:3b:33:38:dd:23:3b:8e:c1:d3:2c:31:ca:
4a:27:f7:ce:4a:60:32:fa:87:87:be:34:f1:4a:d3:26:21:1a:
de:d6:54:1d:c5:da:84:95:ed:ea:f6:3d:e8:a3:97:9e:17:0c:
60:e8:17:70:48:bc:cb:3c:a5:cd:5c:84:cd:06:88:5b:b0:6b:
eb:7f:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:37 2025 by rpki-client