Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: Ar3+XZFKQab87jjU/TrZEgwhUCkKxqqOUCjsycZJTD4=
Subject key identifier: EB:5B:0A:2C:31:7C:8E:FA:C7:45:E7:2B:44:C5:2E:D4:B5:15:0C:09
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 0194BD4E797BD5D175A8CBCFA9CC31D90D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0605
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: 3NT9+zHaYyB9jY/GnyInCvNdkWfp3SgK54zspN5uHgo=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:7b:d5:d1:75:a8:cb:cf:a9:cc:31:d9:0d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=eb5b0a2c317c8efac745e72b44c52ed4b5150c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:27:53:6e:b5:de:0b:e3:c2:eb:87:5d:a3:
c9:e9:39:cb:d9:be:d8:52:32:8b:b3:d0:98:f6:13:
c3:77:f3:27:71:be:b3:a9:93:a7:98:eb:8e:ef:c7:
3d:ab:8f:6c:28:cf:13:48:9d:be:4a:f0:fc:59:bc:
65:7c:14:7a:2e:64:3b:4f:69:90:e1:08:f4:27:fd:
53:46:73:e1:9f:bb:40:e9:92:1d:e5:ff:bb:ae:6f:
c3:13:ea:de:df:83:e6:64:26:1a:d9:26:63:a1:89:
19:b8:4b:c2:a9:41:de:62:f0:c3:a8:70:c6:d7:01:
d2:c1:0b:29:00:01:ce:ab:41:7d:48:9e:25:6b:cd:
60:b4:16:ed:99:c0:3f:f3:bb:90:23:53:3d:f5:fd:
7f:4b:b9:e5:63:fc:b5:67:a2:9a:cd:e8:8f:ac:7b:
29:f8:e6:95:63:a3:89:24:44:9f:23:22:0e:d2:23:
b7:09:f7:2c:3c:22:86:0a:38:29:b6:5f:eb:10:a2:
fc:b2:26:07:20:bc:53:16:cd:61:b4:6c:09:a9:3b:
44:b0:ee:94:3d:5a:5d:44:76:99:79:8c:1b:74:58:
26:dd:18:68:cf:a2:06:d6:51:9e:3e:4b:f1:60:81:
70:96:60:ad:14:64:69:ff:df:f6:68:68:fb:6c:86:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:0A:2C:31:7C:8E:FA:C7:45:E7:2B:44:C5:2E:D4:B5:15:0C:09
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:28:21:13:ee:0d:2a:38:9b:99:f3:2f:85:e6:cf:8e:18:
0e:1c:7d:a9:b3:cb:f1:bf:30:a5:30:9c:67:5d:17:5f:a2:76:
5d:f6:8f:f1:a3:03:4b:37:d7:7a:6b:d5:2d:38:44:3e:27:63:
97:ca:ed:81:32:06:28:d5:97:cf:41:0a:5e:d2:19:30:d9:04:
6c:e6:d1:da:45:cd:c4:bf:fc:af:19:45:fe:82:b3:e7:81:e0:
3b:43:92:10:e5:38:7b:e3:b3:f7:6c:2d:3d:b7:58:31:34:6a:
ff:61:95:b6:40:ca:e3:75:05:2d:65:71:a6:83:05:c8:63:c9:
2a:b4:71:5f:8a:18:25:dd:be:73:a7:13:c5:5a:7d:b7:ab:e7:
dc:e9:16:af:f6:f3:f8:dc:02:4f:32:d9:64:69:5d:8b:53:49:
04:8e:7d:4e:34:e7:56:47:47:32:f5:05:9f:07:05:1f:ae:51:
38:d9:2f:d7:92:18:d8:ff:c8:e6:8e:11:10:53:97:02:15:6f:
cb:5a:1f:99:5b:b4:88:ee:9d:42:4e:54:1c:77:e9:4d:e0:79:
86:78:7d:52:b3:8c:4f:77:da:11:aa:74:2e:fc:67:2c:69:81:
16:65:f8:78:bf:69:94:b3:b9:3c:90:f3:03:29:69:e4:e9:15:
dc:e6:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:04 2025 by rpki-client