Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: O4VVEZ2n4rdaT0SP0cpuJigrscN8BshK7+JrMRrg68w=
Subject key identifier: 7E:1E:0F:ED:8D:C2:28:49:AC:F1:10:C6:40:AD:B8:4E:2E:6A:EF:16
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0194BC3BEAE623FC32EFA2AD9BD2283F9D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 0FD0
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: KVkBB_Ba6oeZFB7h9VpnXzGx6mI.roa (hash: /EQqKmufO6dotS2ncGDLYfDqyDj5cBLDddvB9ieg2Cc=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: iHAZkAcudKm0JJoDdwSHH4C+RR9HABmES6CHZaLIXkE=)
3: s65Swz-UF9qOSTPVx8k4BeI2hLo.roa (hash: w368cQlhvJWkhi8lfudkt5F70hELf6zepKAdhLBClHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:e6:23:fc:32:ef:a2:ad:9b:d2:28:3f:9d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=7e1e0fed8dc22849acf110c640adb84e2e6aef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:cf:e6:f0:5d:4e:21:44:66:25:21:e2:7a:
16:6a:b2:f2:7c:9f:ab:c0:9d:9a:38:47:51:2a:8b:
d7:0b:65:af:1f:fd:b1:0d:e1:d5:8c:f2:cf:d4:ab:
82:15:33:d4:69:35:21:3f:7a:34:cc:33:2f:d3:d1:
ca:a4:3a:25:3f:52:a8:ea:01:ce:a7:f6:7c:2e:17:
a2:bb:0c:7d:54:8b:5a:e5:6d:0d:41:4b:d8:c0:ff:
f3:73:1a:7c:d4:5d:ca:c2:14:ea:8e:ae:ca:2d:ed:
a2:ae:f0:55:31:fb:6b:ed:88:39:4a:b8:4a:49:41:
31:7f:ae:3c:25:13:14:09:6b:87:e1:28:d8:b1:60:
62:b4:82:2e:ef:85:94:05:69:73:d1:74:3d:82:5b:
a2:e9:8b:e6:c4:d2:19:4b:5d:f9:8d:ae:2b:46:e1:
d5:68:e7:07:65:e6:03:63:e5:6e:51:b1:00:16:60:
11:0c:0a:ca:04:9d:d4:c6:c1:1a:e4:51:e1:d0:f0:
8f:94:c7:07:4c:7c:34:33:65:93:2c:98:23:d9:62:
8a:bf:37:92:20:18:6f:d9:03:1e:70:90:1d:5e:bb:
fd:d2:3c:84:86:56:0f:ee:17:50:3a:89:34:5e:55:
3f:35:3c:9b:b6:b1:76:61:d8:b0:9a:72:68:2f:9a:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:0F:ED:8D:C2:28:49:AC:F1:10:C6:40:AD:B8:4E:2E:6A:EF:16
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:86:02:db:31:05:25:53:c9:3a:2e:8e:85:00:9d:ef:14:
2c:b3:15:81:32:0f:88:05:e4:6a:69:23:2c:d4:71:67:12:d9:
7b:d2:db:c1:d5:1b:a6:ba:a1:28:fe:80:59:63:09:a0:92:4d:
37:59:54:c6:82:a4:76:d8:25:c7:68:65:d7:14:d2:96:d6:9a:
be:06:6b:1f:67:06:ce:ae:04:86:7b:23:b1:27:f5:c8:4c:08:
7b:12:f9:f7:a8:1a:bf:c8:4f:6f:82:bd:5d:83:8a:9c:bc:85:
4a:33:73:68:e4:47:90:56:35:cf:3d:d8:8b:b4:4d:96:e7:c7:
92:12:cb:02:0c:cb:8b:3e:80:03:1a:19:08:89:8e:d5:f3:15:
e3:25:98:9b:c2:ab:5c:4f:02:04:37:b1:c6:0a:fc:8e:5e:32:
6e:53:59:bc:22:01:ce:5e:20:8b:28:62:66:f5:d0:66:fd:5d:
2c:72:bc:8a:a6:1c:27:62:bf:56:80:da:97:5f:1c:8b:41:23:
14:ac:dc:a3:e6:ae:83:7e:72:0e:f8:7a:a5:b6:7e:f3:87:b3:
15:7f:5c:13:e9:aa:f5:47:d3:a3:0f:4b:a7:76:8a:3a:8f:06:
df:a2:b0:29:80:81:af:ff:2d:5c:22:60:81:27:6a:4f:56:35:
15:2c:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client