Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: LmrOb4R6qduL/3x8Sn8c189uiRZZcEWYM1DdOoEB1lk=
Subject key identifier: 5D:A4:69:21:BD:4F:43:11:AD:71:5A:53:C8:7E:9B:6C:79:F6:F7:90
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 0194BC3C0DD2DD2FF07CCB7B931D5CA27153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 1111
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: 1GdelFzkbdCNJIpSWQ0Kn6/qp+4ZjQMDBN1hIKywRDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:d2:dd:2f:f0:7c:cb:7b:93:1d:5c:a2:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=5da46921bd4f4311ad715a53c87e9b6c79f6f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:c7:d8:10:ce:2a:07:00:00:15:3a:88:68:
dd:84:45:d1:d4:99:b3:5e:db:37:3e:30:9a:c8:5e:
cd:d0:0a:e6:f2:b6:08:cf:89:2e:02:67:3c:07:8f:
4e:91:c3:52:a0:a7:83:74:07:90:62:76:f7:30:46:
3e:57:db:3e:34:e5:47:f1:8a:2b:ce:86:0b:9b:45:
3d:c8:b3:98:50:91:03:00:72:47:79:0a:97:97:63:
94:4e:47:5b:02:88:0d:88:3c:66:11:c0:2f:1e:5a:
93:a5:9f:65:9b:be:e1:f8:c6:f7:83:0a:6f:2a:7c:
4f:50:49:b0:75:14:12:18:b8:f2:b4:03:13:07:6d:
56:d6:b9:4a:2c:a7:b6:c6:24:a6:20:94:a3:95:68:
66:3a:fc:4c:87:f4:89:89:71:d0:89:14:23:8e:f0:
8f:9a:c3:99:cc:57:60:d3:46:3e:10:5e:51:09:ec:
90:00:6d:ed:00:14:6e:61:27:12:c7:c8:05:8c:87:
77:30:2a:48:eb:31:3e:ea:24:05:53:9b:ca:31:1c:
28:5b:d5:e5:be:77:13:da:0c:dd:1e:27:e6:7a:0f:
6f:41:54:b0:ab:46:94:bc:03:82:d5:05:84:5f:45:
3b:84:63:ff:3a:0b:98:3f:ba:0e:96:35:32:9f:c4:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:69:21:BD:4F:43:11:AD:71:5A:53:C8:7E:9B:6C:79:F6:F7:90
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:bf:d2:02:b4:5b:20:9b:b7:5f:1b:e1:3b:a3:22:6d:7e:
73:75:4b:1b:f8:64:26:a5:d2:99:f8:d3:35:07:00:4c:36:f0:
0a:d9:3c:1c:1a:c5:d9:60:6b:9a:29:f4:6f:0d:38:45:8c:87:
95:38:09:45:08:51:ab:ef:2f:42:ed:43:72:c7:44:e5:3d:2d:
e4:91:ea:d1:81:b5:57:f3:e8:11:97:e3:18:82:3a:a9:83:3e:
ea:8a:59:60:8b:b5:c2:ff:ed:29:90:2a:f6:bd:1a:6a:7d:37:
c7:ab:ff:c2:ab:ca:0e:63:56:46:4b:25:80:f6:41:d4:8c:94:
24:ca:a9:b2:47:da:d2:05:07:c2:b0:c9:f1:59:fd:92:a0:62:
98:4d:3a:67:a5:83:1a:5e:e1:19:02:51:6a:7c:7b:e4:bf:b2:
a4:d8:a3:19:14:5d:bb:a6:56:f3:93:5f:18:bb:f8:eb:6a:4e:
77:fc:45:dd:71:65:dd:83:fe:66:bf:08:12:4c:df:0a:3d:2e:
b5:17:e4:a6:59:e0:d8:7c:05:ef:ef:74:33:73:ef:c7:54:54:
f3:23:5c:39:20:04:29:07:cc:47:77:68:d6:4c:1f:df:33:c8:
04:eb:d0:d6:b7:dd:ba:1c:dc:67:9b:cd:2b:a0:38:d8:30:c5:
92:8a:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:39 2025 by rpki-client