Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: PlvTAVb+S2jamrGO/Iw26+Rc97a8G+fYpJW/yJDBFWY=
Subject key identifier: E2:23:6A:FA:B0:CD:9B:06:30:E5:0A:AF:1E:9F:4D:F9:E8:92:B4:2B
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 0194BBCE3B69C6ABCC769AFFB295B8989070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 1182
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: C3gJxBQyBx4duHPu0nx/Zi2knTcMZleH1Hq0HdaoVGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:69:c6:ab:cc:76:9a:ff:b2:95:b8:98:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=e2236afab0cd9b0630e50aaf1e9f4df9e892b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:7a:44:c0:4f:94:96:13:cd:3a:fd:44:f8:
ad:6c:9e:9c:f1:8f:75:14:96:6b:5f:5f:1e:12:0b:
58:52:0e:d3:84:4e:28:0d:76:df:68:d9:9e:97:c8:
c3:4f:b3:16:cc:a7:92:39:aa:0b:2a:05:ae:bb:1b:
b5:b3:01:f3:47:2c:12:bf:8e:d7:e2:2b:03:2f:eb:
1c:57:83:42:cd:2f:6a:bf:a1:e4:53:75:7e:c8:b4:
ec:bc:24:ee:41:21:14:be:eb:0d:6e:0d:d6:81:83:
5d:15:a4:64:4b:4f:37:ca:e8:d7:60:98:89:38:89:
39:5c:38:e0:49:e0:96:65:23:ae:8b:a1:46:df:0e:
33:2c:87:0a:9b:df:84:67:f3:dc:08:b1:b5:6b:ea:
73:f0:7a:ec:0e:57:53:42:61:60:4d:73:ff:87:91:
a2:eb:c2:3d:fa:a6:0d:99:87:4a:3f:06:b5:a7:49:
25:9d:8a:18:5c:79:5d:c5:74:d7:3a:92:87:42:2b:
7f:46:29:f3:26:64:f0:2f:15:cf:22:9c:20:9f:de:
5e:6d:48:4b:f4:7a:0e:c7:01:b2:f9:a3:b2:91:3e:
5a:1b:68:ef:b5:d5:65:c0:ae:11:59:84:ce:21:7c:
f6:94:6f:1c:f8:fd:a6:87:1b:f4:eb:4a:3c:ca:8e:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:6A:FA:B0:CD:9B:06:30:E5:0A:AF:1E:9F:4D:F9:E8:92:B4:2B
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:46:26:06:1c:d6:87:68:5f:f8:f6:c8:58:74:94:11:fa:cf:
c2:a7:62:5d:9e:89:f6:e1:c5:4f:20:77:69:ed:35:21:00:c0:
c2:97:29:4a:f3:ab:df:19:a5:1c:5a:d8:6e:80:1d:86:2a:74:
ce:4e:0d:60:7e:c0:d5:09:5c:33:4c:4a:7a:34:45:b5:eb:10:
de:45:bf:e4:aa:5e:08:e2:dc:41:3d:4b:38:48:4f:49:a8:a2:
24:2a:33:69:5b:44:36:1c:c9:68:fd:6c:ec:e0:44:de:7c:ae:
3f:a1:85:95:f2:47:16:e0:6a:0f:a0:bc:fa:16:c3:9b:a1:65:
0b:eb:47:8e:00:85:9f:f3:25:6c:77:5f:51:c2:f4:80:2e:05:
de:6a:b9:5e:b4:6a:58:7b:37:52:fb:1d:32:80:57:1e:fd:03:
64:16:24:18:50:bc:bd:d0:a3:77:af:7d:50:72:6b:61:fb:d4:
a4:5f:93:ae:58:20:90:f2:c7:b6:a3:77:b0:68:23:13:39:3a:
49:22:fc:05:4c:23:ea:fa:f3:5b:28:f1:23:6b:92:2a:3d:2a:
22:24:d5:9a:36:cd:2f:5c:18:2a:ec:7d:45:8f:fa:25:12:0d:
c3:dd:5c:51:2d:92:50:c9:86:f8:2a:75:13:5d:ed:56:83:4c:
90:22:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:23 2025 by rpki-client