Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: 6IBxMO+N3XmiJS3hmSmDlMt9M2gdRJn/g77UD2Kfp/c=
Subject key identifier: DE:A9:9B:CF:E7:25:3C:4B:A7:8C:2F:A3:B4:C2:E2:E1:29:EB:1A:90
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 0194BC3C9AFCF1404CAE81669420A72D17F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: BbkMCHpPCiYUaykCUrlFp75SeAw+yoQEOeQzpRH68Zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:fc:f1:40:4c:ae:81:66:94:20:a7:2d:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=dea99bcfe7253c4ba78c2fa3b4c2e2e129eb1a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:a6:4a:2e:c5:dc:bf:e6:b5:b0:1a:57:3b:
9d:b9:68:d5:19:a9:9a:ff:96:f0:2d:4a:dd:44:e7:
a7:ae:32:54:7c:c0:68:10:e7:d9:b0:18:39:74:a9:
75:18:39:f3:d2:84:7d:d3:b7:0f:54:aa:a3:ee:f1:
14:5f:08:70:73:69:ef:5d:ed:95:95:80:bd:24:a2:
6c:54:1b:f9:c9:d0:55:21:35:f9:c4:00:e2:58:4a:
c3:b4:14:d4:a1:45:a5:ba:ef:79:7a:9c:c4:08:c3:
42:28:f2:b9:1a:fc:c7:86:73:e3:c6:b1:0f:70:4e:
f0:b7:08:30:00:b0:2c:2f:ae:92:e7:de:7c:23:f4:
5d:9e:2d:18:b9:58:48:54:38:8e:1d:4a:4f:a4:a1:
95:c6:d4:12:ba:3b:14:ff:5c:aa:c9:eb:1d:81:97:
14:44:24:d9:80:7f:93:14:54:10:13:63:0b:76:19:
05:1a:bd:d3:25:3b:ad:5a:4f:a7:a7:bf:2d:d6:f5:
68:8b:5d:59:f5:2f:e8:49:2e:d1:cf:74:7a:ef:d0:
ef:3c:48:91:31:c0:ca:bb:d1:83:5a:36:0b:7d:34:
2f:ce:75:d9:48:c2:88:75:36:5a:11:50:2a:f0:b0:
94:97:9b:92:78:7e:3a:9c:35:29:3e:21:63:0e:19:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:9B:CF:E7:25:3C:4B:A7:8C:2F:A3:B4:C2:E2:E1:29:EB:1A:90
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:2e:b4:c0:2b:03:6e:d1:4b:25:da:cf:7e:a2:20:6a:09:
f1:bc:34:3c:13:e1:15:78:8f:ec:c1:53:c8:7a:36:57:df:98:
fc:31:a6:42:f3:fc:87:11:0f:89:d9:e2:f5:b0:5d:0c:60:7c:
89:2d:6d:e3:c6:77:74:66:1d:fd:1f:e7:13:ed:0b:41:58:ad:
98:77:72:7f:ee:ef:97:ed:9c:98:88:9b:18:75:a9:ca:1e:06:
ac:29:01:0d:86:90:7c:50:50:82:04:5d:a4:05:3f:52:83:f5:
d8:6e:7b:ad:9b:c4:c3:b2:d6:be:f6:45:3e:72:74:14:ef:06:
d7:32:35:c5:27:f9:60:f1:14:12:76:3a:71:7c:01:eb:76:c3:
54:ec:a0:71:e7:76:eb:98:d6:3c:49:ae:4f:83:6d:7e:b8:2e:
96:23:6e:67:67:9c:ba:9f:c0:6f:a9:e7:2c:f3:09:e3:3d:44:
00:f1:a3:a3:f5:db:bc:7c:a5:97:6d:c9:66:ae:64:45:9e:2f:
d5:7b:f8:0d:9a:a2:d1:41:ed:fa:29:b1:9a:47:f0:8c:56:9a:
6b:46:1d:d7:3a:76:40:9c:72:6a:bb:30:b3:6f:97:03:8f:25:
ae:dd:3f:b8:1f:1b:0b:e3:b8:31:38:f5:73:5b:45:3a:95:c5:
02:17:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:27 2025 by rpki-client