Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: 3v51nNZfTE2P6kAhLNgHL+BiLZhpQ9dCUYOyuCYkoZk=
Subject key identifier: 02:23:A7:24:FA:FD:05:31:D8:CA:92:6B:BA:88:BE:63:93:99:39:CE
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 0194BC3C5CCD4BAF66F0875268C9F61C6E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 09FE
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: Q+1yjk20C+jll8Vt5pZctedADnv9vkfVuuvV6OylTDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5c:cd:4b:af:66:f0:87:52:68:c9:f6:1c:6e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=0223a724fafd0531d8ca926bba88be63939939ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:7d:2a:6e:7c:18:9b:38:db:da:39:a4:cf:
c2:3c:d7:19:0e:be:f3:2e:92:b8:80:53:79:47:d2:
ec:73:01:43:d7:09:83:15:c4:d2:97:69:70:b1:48:
e2:80:60:04:4d:4c:26:6e:51:a0:7c:f2:94:06:c1:
5c:e9:8b:e2:40:8f:6f:5d:83:5b:78:af:3f:9f:fd:
11:f7:55:55:23:78:72:56:d1:75:45:c6:d0:6e:f1:
d6:76:b5:8e:1c:7d:6e:b4:84:a7:ef:da:82:0c:42:
df:42:3b:c3:01:3a:13:8d:3e:bc:d8:11:24:48:6f:
df:76:ea:f0:52:54:17:a8:dc:50:bc:0a:cd:3b:fb:
9c:56:b6:fb:2d:3e:d1:d2:18:c6:db:b7:c5:92:ce:
48:63:e3:d3:ab:56:be:a2:09:0b:97:4b:4b:a5:eb:
fa:70:a5:19:2f:ef:8c:bb:e8:26:ac:ff:b6:7a:9a:
4e:06:1a:5e:ac:57:56:a3:ca:1b:36:a0:99:9e:8a:
37:d1:ac:40:fe:a9:3a:cc:d7:a5:55:b2:1b:34:93:
b3:2a:2a:f4:fc:ab:c3:8e:fd:ce:93:42:e3:8a:e1:
2d:4f:fc:ca:40:38:29:b4:4d:1d:62:c5:0d:83:5b:
30:c8:c8:47:30:7c:fa:21:b9:9b:a9:0d:30:13:f3:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:23:A7:24:FA:FD:05:31:D8:CA:92:6B:BA:88:BE:63:93:99:39:CE
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c7:a5:f9:6e:ef:91:c3:d5:a1:e1:9d:4f:cc:a0:91:7c:a6:
b1:00:4e:f5:9d:83:41:60:eb:bb:9d:4e:7a:40:0d:c8:e5:78:
13:51:43:2b:b2:f7:9f:dd:13:dc:fb:53:6f:c7:00:3f:7e:06:
a7:4e:88:ca:82:1d:4f:36:ef:c8:96:be:be:2c:6a:1b:4b:e4:
34:a3:0e:f3:e9:25:6d:84:6c:e2:50:66:dd:ad:72:ac:57:5d:
1e:0a:15:19:c6:c5:91:35:a5:42:08:77:1b:fc:6b:97:6b:9f:
81:17:3e:f5:39:3f:d0:c9:bf:1c:44:be:1e:d8:b1:98:ae:32:
8d:01:fa:92:16:e7:79:d0:fb:e1:c5:aa:e7:83:69:40:1b:ac:
73:07:9a:3e:2d:dd:2f:9b:63:dc:66:da:a9:1b:4a:a1:2a:43:
dc:6f:76:e1:84:fd:ac:d5:1f:4b:fb:4c:21:45:47:6d:c9:fa:
93:8a:35:74:ea:59:60:0e:64:89:e2:a1:36:a0:9e:71:f1:c8:
be:ad:4d:21:6a:a5:32:f6:66:c0:7d:f6:27:e8:78:5a:c8:47:
16:47:7e:13:25:12:3f:ba:81:5e:da:c4:43:b5:1f:9f:15:1d:
e4:6e:b7:5e:a5:75:e7:6d:93:7c:e7:86:b7:ea:6f:8d:5c:e1:
b9:a5:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:12 2025 by rpki-client