Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: z+VS++vHntTBOnqk+fz72N5JHHucQIOhxvoMUxVMPi8=
Subject key identifier: D4:43:0A:33:65:A9:EB:BA:3D:F7:20:22:B8:5B:A4:8C:79:A5:8A:E9
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0194BCAA35461569859CA0AEBE7DABDFABEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: Udqz+ON4tzs1JDttHw4MmSTYQXnideGBUDgvf4AEy5k=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:46:15:69:85:9c:a0:ae:be:7d:ab:df:ab:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=d4430a3365a9ebba3df72022b85ba48c79a58ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:ad:66:9e:0a:c4:9d:47:61:d8:43:1d:a9:
aa:b6:0a:81:2c:b2:46:1e:19:dd:d2:98:a1:82:b5:
b9:96:9b:76:83:71:c3:a7:24:15:ce:d5:d3:37:74:
fa:63:86:79:6a:15:7b:3d:52:d0:24:d1:58:95:b0:
da:4a:90:bd:d8:16:15:3d:62:77:c9:e3:b3:95:2e:
14:cb:a6:6a:b2:07:dd:f1:9b:42:c2:28:8e:ad:80:
86:25:49:e3:56:c1:dc:d8:c8:f0:f8:22:ec:2c:37:
2b:ab:c7:d7:6f:e8:f7:55:b8:3e:8a:1d:a5:c4:d3:
35:09:22:4d:b1:53:f5:01:43:e8:8e:c8:65:ae:08:
f3:e8:00:3b:2c:84:2b:d6:f0:cc:3d:3d:f9:12:7e:
8e:0e:44:d5:5c:3e:04:52:73:81:fd:59:a7:70:13:
06:3a:cc:7f:8e:5c:a6:84:fb:26:ca:5a:af:57:5f:
34:e6:12:52:a6:0b:9c:45:04:8f:fb:f4:1f:ab:a3:
be:14:2c:a8:b5:66:48:85:1e:94:2d:9c:a2:bf:e4:
1d:33:3b:03:95:27:b6:24:af:b1:e3:71:3d:66:e1:
cb:79:ef:b5:27:1f:2d:87:9b:2f:c8:4d:99:23:e8:
c4:30:e0:e6:53:01:8c:d2:e2:78:e4:48:d4:dc:d0:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:0A:33:65:A9:EB:BA:3D:F7:20:22:B8:5B:A4:8C:79:A5:8A:E9
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:92:3c:a5:c6:76:c1:f7:14:3b:de:06:4d:9c:9e:e9:05:aa:
1c:38:a4:73:27:fd:45:6e:89:44:23:30:bc:e6:6c:f7:42:ce:
9c:30:28:b6:1a:f6:dc:7a:ca:97:72:bc:1e:b0:91:e1:1f:c4:
51:e9:3c:82:24:0c:d5:40:7a:24:fb:c5:2c:37:61:e8:7b:80:
3b:25:0f:fb:b9:9d:25:07:93:21:38:98:e1:a8:b3:a2:fa:d1:
34:6b:b0:ef:3a:c6:b4:44:15:51:ec:50:8d:df:85:78:51:e7:
d7:69:2b:84:3f:ee:4e:c4:fd:95:b6:f2:ab:91:46:c1:29:35:
3f:75:6d:75:33:22:ea:fb:cc:61:cf:69:cd:f6:e0:a7:26:6a:
f2:b3:48:bc:e9:e0:96:9d:30:19:37:2e:3e:9f:26:c6:ef:92:
3d:fd:27:57:2d:78:00:60:80:b9:6d:47:4b:05:99:52:d7:db:
19:3e:2a:6e:b5:91:7a:fc:ee:c9:b5:bb:fe:ab:8e:3d:08:a0:
6c:85:b1:e7:5f:bf:99:66:3a:14:b0:e1:1f:37:a0:e4:dd:cf:
77:01:ad:fc:02:07:62:d2:82:db:83:20:1a:5e:a5:b2:27:04:
97:a8:23:d2:46:e2:27:46:5c:f4:3a:c9:c2:b1:2a:02:85:44:
eb:36:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client