Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: Lp45ESaequnui1yXMerHmRbm+NwR7QtQaoULSXPY51c=
Subject key identifier: FF:64:BD:4F:EB:20:3A:FD:3F:CF:4C:39:36:AB:A4:9B:CF:82:BD:53
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0194BC3C5CDB655E7AACFEC2496E85A2594C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: wxH6eza5hCNzvRs2aq05wl9raJN/XjyOmQwNfU01qQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:db:65:5e:7a:ac:fe:c2:49:6e:85:a2:59:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=ff64bd4feb203afd3fcf4c3936aba49bcf82bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:fe:f0:67:eb:1c:79:9f:e0:f9:46:0a:3d:
35:bf:c7:cd:da:dd:ee:e5:a5:4d:3e:f9:88:96:b4:
16:e5:86:f7:57:63:68:11:0f:9e:eb:13:65:08:04:
2b:c2:21:c0:db:b0:0c:de:23:0f:69:bc:ee:cf:17:
7c:c1:e5:1d:e0:3b:ae:b3:2b:87:8c:51:fb:d7:0c:
60:76:0b:ad:2f:96:b6:7f:e7:32:53:af:8b:b0:13:
d5:4b:42:18:53:10:9d:77:45:f2:1a:d9:6b:94:d9:
7b:76:cd:a7:8d:d1:1e:aa:45:4b:9d:17:22:75:95:
63:01:7e:e1:75:a3:f0:90:0d:f8:b3:14:b1:c7:09:
bc:e4:f8:95:07:45:ac:85:f8:64:0b:7b:9c:1e:13:
99:3a:f8:95:6c:f7:c4:28:43:21:37:46:0d:2d:a7:
e7:73:b7:6c:c2:7e:45:ab:2a:87:f1:29:12:fe:e0:
e7:04:ef:38:47:25:b5:2f:1f:02:d6:96:28:2d:2a:
8c:67:3e:30:bb:dd:de:47:b4:9b:ed:43:c5:31:18:
5c:6c:cb:4c:0e:bc:7d:1b:b5:68:d9:e0:d1:17:e9:
66:35:4c:67:9f:06:1f:aa:ac:be:c6:3a:a8:d1:e6:
05:50:13:58:f6:29:42:22:15:53:e5:af:86:e1:2b:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:BD:4F:EB:20:3A:FD:3F:CF:4C:39:36:AB:A4:9B:CF:82:BD:53
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:bf:dd:b6:41:3c:77:c1:f9:9c:13:21:a5:21:d4:03:d4:
61:23:58:03:3b:f7:33:21:41:b9:a7:25:99:a9:c0:35:4f:12:
62:8b:13:5d:34:1d:a6:44:9b:4b:e1:c5:f8:7e:a9:6b:33:1a:
95:75:57:89:87:2c:20:59:81:cc:56:c9:52:ee:48:64:79:c4:
b2:2c:42:7f:3d:8e:42:76:30:b4:57:b9:03:bf:25:f9:62:c5:
9b:a4:30:95:16:75:8a:1e:14:40:bd:ad:a5:80:14:a7:01:9a:
e3:52:f7:bb:56:2e:c6:22:df:91:d8:81:e6:8a:8f:1e:c2:a6:
e7:42:69:71:a7:d9:04:18:e4:36:28:2c:2f:c4:da:24:d2:9e:
18:72:a9:e7:65:01:7b:c2:d4:66:c5:1d:c2:74:f3:92:0f:61:
c9:c2:3d:82:15:5f:2b:d1:0d:ad:01:16:ce:a3:24:56:ce:07:
a9:7c:00:64:3a:91:a2:51:cd:93:08:98:09:de:4f:aa:9d:37:
fd:b0:8a:86:38:59:e4:58:1e:7b:5f:ae:64:e0:ae:43:b7:d3:
9b:6d:2c:32:ae:cb:c2:bd:8f:c5:e6:23:0b:20:23:32:68:50:
66:4b:f8:9d:e8:8f:54:98:1e:5c:6f:54:e4:f5:f7:15:84:d7:
e8:43:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client