Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File: QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier: 7iqKL8N1hJlgtVZgfYjp6953htr/tV4w9BSxzXDi83I=
Subject key identifier: 41:DC:83:A8:CF:2C:D6:66:2B:F3:97:8D:EF:77:42:5B:7B:0C:09:CE
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 0194BD4E740B322D3592633A6FE487D8976F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number: 07AF
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (hash: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=)
2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: DfwCDVpOK32GGvPsKRCwYxcu/MrCJTjb+JzbnzxWGL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:0b:32:2d:35:92:63:3a:6f:e4:87:d8:97:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=41dc83a8cf2cd6662bf3978def77425b7b0c09ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:cc:e3:bb:df:37:5f:c4:cb:04:12:c3:0f:
e0:80:61:7e:aa:81:ed:8e:6f:97:a5:59:94:1e:6c:
1b:cb:2e:15:57:ab:13:6b:c8:f5:2f:7d:51:d6:52:
dd:2c:b5:dc:ac:cb:d6:c0:47:90:b0:d6:52:c3:24:
d6:65:ef:74:54:1d:4e:db:d9:25:7a:27:ac:76:56:
f4:6d:4c:79:87:c5:1b:73:50:17:68:21:5f:9b:f3:
ac:8c:11:f7:9a:86:95:80:fc:0f:38:7c:79:43:09:
c4:dc:e9:b6:df:9b:25:60:5f:d4:da:0d:00:4b:67:
11:57:4a:be:1b:51:74:26:0b:d0:74:27:4e:6e:c7:
4c:0e:66:d2:08:38:85:6f:79:fa:fd:80:99:ad:86:
ed:cf:d5:20:d6:ee:f3:ab:a5:02:de:9d:fe:14:f7:
1d:23:33:a6:cf:ad:84:35:b3:65:03:ee:a0:07:97:
3a:63:dc:0e:13:88:1d:a6:7c:59:96:f4:d3:fa:d3:
3c:a9:3a:83:87:b3:08:85:61:30:a9:84:80:19:f4:
28:54:24:6b:6d:4c:1e:0d:bf:74:d1:90:21:34:ff:
0a:b2:34:d7:01:00:11:9a:bf:54:35:2a:fb:68:d3:
8e:69:9b:d9:10:90:ac:cd:f4:ed:ca:10:36:f4:41:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:83:A8:CF:2C:D6:66:2B:F3:97:8D:EF:77:42:5B:7B:0C:09:CE
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f5:df:6f:e5:d1:89:ce:4c:78:ec:72:45:53:70:cb:10:e9:
48:37:ce:a2:51:ac:5c:b7:53:2d:11:65:0d:81:0a:8f:24:58:
23:62:d3:f6:39:7a:2d:86:de:ef:6d:de:01:9e:06:2a:f1:1d:
b5:2a:a3:95:0b:7e:66:61:a8:42:3a:c2:e7:cb:7a:bb:7c:2b:
d4:87:61:55:13:8c:6d:09:79:79:95:35:50:69:96:31:13:7c:
23:d0:56:34:9c:b5:c5:c0:c4:a1:48:e0:70:57:9a:cc:15:69:
75:6f:e9:fe:16:3e:4c:43:43:9e:43:d7:a8:8d:5e:41:9c:16:
08:b8:21:27:fb:7e:48:30:db:e3:21:1e:0f:bf:82:f8:4e:bb:
c9:3c:8b:f0:b1:90:b0:86:c1:4b:e2:4f:85:fd:bc:f0:b9:7a:
2e:de:77:67:87:35:de:3b:0e:ac:1e:81:56:80:10:4c:f2:aa:
a0:95:4d:3e:32:9e:ae:e3:0b:30:22:3f:d2:a5:e6:aa:54:21:
79:b7:36:ed:92:c6:de:0a:9b:3e:6f:f6:f4:ae:1f:8e:95:e5:
7d:1c:f4:8e:10:12:5c:22:0c:15:42:f0:7e:55:89:ae:13:60:
37:e5:d5:08:06:bb:42:d6:05:28:aa:4b:61:b6:8e:b2:b2:27:
08:51:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:36 2025 by rpki-client