Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: zjvKbjhUsIZns60UFJJTeVnmF/0Pj7ZfhLYe65bVqts=
Subject key identifier: 85:5D:89:D8:DC:1E:CF:22:83:15:DD:E2:24:FC:34:74:04:B7:22:2B
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 0194BC3BF3C77D0FB93478923A04F787C764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 0693
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: 8hMke7nwZqscODkHG8QANsjcRLlEg2lXCBvGO78yPSI=)
2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:c7:7d:0f:b9:34:78:92:3a:04:f7:87:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=855d89d8dc1ecf228315dde224fc347404b7222b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:fa:29:30:54:8b:6d:56:83:e8:86:de:38:
cd:0f:f8:d1:1e:3b:03:62:6a:67:0d:0c:79:03:56:
d2:55:27:2a:06:e5:bf:55:d6:31:fb:ea:6c:2c:9f:
3b:46:e5:08:91:28:d6:d8:9b:bc:d9:4b:a3:7c:ae:
59:9a:49:74:f1:fe:60:ab:1d:93:ae:42:4b:3f:70:
94:cb:be:8b:49:42:e6:6b:ea:4c:19:c9:eb:38:63:
5e:28:7f:5a:80:1c:ab:69:8a:62:ec:8c:5c:d4:3d:
45:43:97:65:40:19:61:48:34:71:44:62:ae:65:3d:
58:8f:8a:fa:e6:cf:a2:73:14:95:7e:39:de:05:40:
7d:75:98:db:14:58:66:ab:f4:4b:28:9b:64:86:62:
b6:39:38:a4:cc:33:ad:13:18:a1:d7:8b:6b:b4:97:
35:81:73:5a:51:b1:bd:3e:82:77:81:f0:ab:2e:1a:
ba:d8:2a:4d:13:ad:e2:56:43:6e:67:e0:84:66:28:
95:27:ab:86:30:22:9a:c2:7a:82:3b:f1:a4:00:cc:
53:0f:50:ef:c3:19:03:89:8a:17:df:ba:50:aa:b2:
ca:5b:d1:de:0a:fc:e7:ca:95:74:13:00:8c:d6:41:
53:b8:c1:1c:49:1d:01:89:f3:e2:f5:fa:67:91:12:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:89:D8:DC:1E:CF:22:83:15:DD:E2:24:FC:34:74:04:B7:22:2B
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:15:4f:f9:6d:7c:57:2f:27:0c:4b:d3:31:12:62:41:ab:cf:
20:38:44:de:fd:10:3c:e3:63:b9:db:b4:e2:71:4f:be:bd:f3:
5c:d1:2d:b9:a2:64:4b:e4:04:ae:ef:08:e3:3e:29:e8:d8:7b:
6e:3b:9f:c9:0e:04:d3:38:2a:86:d6:49:4e:8d:4d:88:1c:66:
41:46:86:f0:79:4b:45:cd:13:f8:15:87:08:de:79:fa:00:ef:
dc:eb:ed:8a:d3:c5:0a:bd:b1:ff:a1:1e:3a:8c:2a:09:a7:9d:
7f:70:97:2f:83:4d:44:d5:9c:2a:82:66:cc:94:18:cf:0d:e4:
83:58:3a:e7:08:36:04:0a:54:39:7c:ad:8d:85:de:3d:fe:dd:
cb:b3:69:1a:2f:a5:cd:8a:f1:d3:99:18:44:a8:31:b1:be:cb:
dd:de:35:c8:c5:03:b5:11:6e:92:f4:32:ca:40:39:06:05:24:
45:0e:7f:f2:21:15:a9:c1:e8:7b:5a:25:5c:09:1b:0f:95:6d:
12:4c:ad:58:26:35:66:47:6a:ec:62:05:75:a0:64:30:d9:86:
1e:58:b0:05:ff:1f:ba:47:0d:b8:3d:f8:d6:b3:98:37:1c:53:
b3:c1:66:6f:f5:24:50:b9:91:3a:8f:73:b0:05:22:29:a4:a3:
5f:ce:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:25 2025 by rpki-client