Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: mGdGZeYkjjf07JehL2aO9+/jl9KABFXyk5UZggIba1M=
Subject key identifier: 1F:A3:48:EB:C5:50:5E:CA:7C:24:19:CA:B2:DA:5D:8F:F6:A5:55:3E
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 0194BCA9F0C307963B9BCD6F8A6060205332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 12C2
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: /aVVW3JjV3rwPnXpENPu5Fza63xMMdPnYRFM1b+YXh0=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:c3:07:96:3b:9b:cd:6f:8a:60:60:20:53:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=1fa348ebc5505eca7c2419cab2da5d8ff6a5553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:8f:1b:d6:25:2c:ea:d4:ab:29:96:0a:0a:
b1:16:aa:43:e6:c8:c5:eb:43:56:ed:91:22:af:2e:
53:0a:59:3e:38:90:42:25:a4:db:fe:26:a9:aa:33:
ca:bf:49:c1:ee:1f:ab:f9:8c:f0:1e:d6:05:43:bf:
1e:0b:fc:7f:f0:e2:f8:2e:99:9e:6c:0f:90:d7:9d:
e5:22:9c:f7:65:16:07:13:23:6b:69:32:7b:0c:05:
1a:9e:e6:c8:8d:04:4f:82:9e:4e:88:d1:27:e9:4c:
bd:04:37:50:dd:72:73:29:9c:1d:7f:81:82:b3:b7:
85:06:54:86:0b:c8:83:e7:c9:0d:ba:9a:5c:a3:8f:
17:53:85:ee:97:c0:7b:8a:07:84:55:e8:e4:29:d6:
ab:44:e6:5b:5c:d0:22:f3:83:e7:2d:4e:a8:2b:fd:
52:2e:a1:08:31:2f:cf:bf:98:ed:d5:b0:27:71:4d:
6a:f6:af:c1:9f:d9:0f:66:df:40:0e:f0:f0:69:ac:
51:a5:61:75:24:a4:11:89:61:6b:7f:8b:5f:2c:ab:
b3:a9:5f:80:82:78:44:77:3f:56:8c:f7:4e:f1:4f:
9c:e9:6f:ad:53:f4:83:de:0d:a5:35:46:ca:5e:e8:
e9:26:9f:70:a3:8f:c0:0f:99:b4:59:d0:19:00:40:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:48:EB:C5:50:5E:CA:7C:24:19:CA:B2:DA:5D:8F:F6:A5:55:3E
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:65:a3:77:5f:7a:96:d5:6e:f2:b6:5d:97:44:d7:49:5f:cf:
79:3f:f0:e5:5e:fc:63:f2:3c:e9:67:a4:ca:c6:d1:58:56:34:
bc:26:84:12:7a:af:12:57:c9:63:cc:01:e3:fa:00:81:bc:b4:
e0:8e:84:65:6f:d7:d0:6b:84:db:ca:c5:de:49:b1:d7:da:c9:
10:b0:72:9e:02:a0:72:ee:d9:62:ed:e9:a4:a1:83:de:e5:04:
b3:28:8f:b2:26:6f:a4:39:ab:1c:a1:7e:cc:2f:83:e0:c7:b9:
6f:da:9d:f3:7b:00:8d:30:79:e9:cf:ee:e1:32:2d:49:50:de:
92:38:c9:6e:f5:bb:84:c9:7d:2c:e1:17:4d:46:ca:49:82:c2:
b4:29:0a:07:0b:53:73:4a:b2:12:cb:7b:4d:87:f6:3c:11:84:
7f:ae:01:60:9c:9b:e6:a6:9b:07:19:e1:c3:4a:c6:f5:0b:3d:
28:ad:8f:30:68:6e:0e:a1:65:93:cf:90:19:21:50:aa:93:8e:
0d:65:48:21:bd:32:26:cb:67:4e:cc:9f:fd:59:c8:31:aa:f6:
56:69:e9:78:14:e8:c0:e9:11:4e:65:38:3d:0f:4a:f7:2a:87:
c1:72:99:be:84:48:aa:f1:d7:6f:ac:ec:1f:f4:b0:ec:b2:50:
22:fb:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client