Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: /jR1u+YTzY6E95M3UubHX4WGQ2jDp06zaUTp9zKELto=
Subject key identifier: 57:F5:4A:CD:B3:09:95:BF:9F:14:2E:C2:27:C2:8B:79:BB:61:96:3A
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 0194BD856EE593F8C40D714751B0E18FE19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: edbUmqBotcC3cNATqK6IsTa/WkewOSQQh8q1PQx9zYg=)
2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:e5:93:f8:c4:0d:71:47:51:b0:e1:8f:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=57f54acdb30995bf9f142ec227c28b79bb61963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:36:57:7e:a5:e9:c2:d0:2f:c9:fe:80:51:f3:
76:a0:6a:88:2b:8f:43:4b:24:06:ad:27:68:9d:d8:
26:df:62:c6:22:0a:64:c6:6a:ca:56:5a:6e:9a:69:
ad:70:91:75:a6:69:b0:42:95:7c:90:b5:c8:c6:ed:
70:89:9d:9c:a9:bd:b9:a1:4f:e8:cb:46:cb:66:c7:
7d:26:1f:73:fc:7b:ee:2b:19:cc:eb:b1:81:8b:17:
aa:9d:2b:62:b0:ca:c1:ce:eb:2d:86:fd:62:18:89:
25:86:f2:9b:83:0e:eb:14:4d:4f:49:ef:c5:09:99:
55:76:24:d8:5f:fe:8c:ec:65:f8:34:c7:74:6a:f2:
84:8c:0d:07:2c:4b:4e:53:c9:fd:6a:d0:a5:49:f8:
1f:0a:63:86:c0:fe:01:4b:31:e6:38:62:95:12:02:
07:b5:34:b9:33:36:f2:00:5a:0f:32:36:d9:37:54:
f1:1e:f3:80:71:f0:fc:40:43:61:f1:8f:5c:e8:04:
ce:26:dd:c5:b9:e5:dd:80:b8:58:de:6a:3d:86:8b:
ac:da:16:3b:30:aa:85:76:16:40:88:de:e5:59:ee:
08:67:66:05:6e:f9:75:26:97:d9:57:3b:f5:21:05:
29:b1:97:fc:4b:ac:e6:14:a6:e4:29:5a:5d:0d:24:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:4A:CD:B3:09:95:BF:9F:14:2E:C2:27:C2:8B:79:BB:61:96:3A
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:47:05:e0:37:3a:7a:e2:ba:26:0c:19:ed:e6:fd:8b:59:
df:9f:33:8f:8f:be:03:9b:37:6c:4e:b3:d1:4c:43:87:e1:c2:
60:4c:e5:db:09:3f:80:d0:4f:b0:1c:e9:ed:af:4b:31:97:4c:
58:c8:f0:36:f1:ae:35:73:be:c1:69:50:e1:a2:86:09:7a:8c:
b9:a1:17:b7:9b:28:f6:cb:9e:55:b2:34:54:29:fd:2f:03:e4:
35:0e:28:96:fa:50:37:c0:31:38:93:e7:ca:ae:98:f6:7d:bd:
25:c6:79:4e:fa:0a:d5:43:95:2e:5a:7d:19:6c:ad:a2:ca:55:
75:46:32:e5:6e:82:b7:15:10:c5:1f:c3:90:74:6c:5a:05:16:
35:56:8c:84:58:6d:38:ad:c0:bd:ab:f2:6a:1c:95:22:a2:b3:
2e:af:33:6f:07:6f:fa:be:8e:7d:63:1e:9d:b2:31:23:8b:b7:
e7:2f:f5:60:06:34:53:6b:76:4e:b1:95:92:a4:b3:55:aa:8b:
71:5d:a6:5b:65:50:6e:7a:09:24:73:44:62:d3:75:00:7b:67:
8d:e2:57:2d:ba:59:df:99:5c:af:19:08:ff:b4:cb:83:fb:a9:
46:46:27:d0:c3:4b:8f:52:90:a3:43:97:62:31:02:5b:72:29:
65:89:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:44 2025 by rpki-client