Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: O+7+xq4bEsTjZkdFdl7N+dMftT7OxdMAe1M4JwJ/qbM=
Subject key identifier: 3C:7A:1F:D4:EC:D5:CE:CC:62:EB:5C:0A:E5:E7:56:D3:F4:9C:FC:1F
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 0194BD853743478B14613FFF43B50FE7222A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0899
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: 9oKBwn8r4poLOxPapZyPtmtfuwzgKvTECHQdI00apTM=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:43:47:8b:14:61:3f:ff:43:b5:0f:e7:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=3c7a1fd4ecd5cecc62eb5c0ae5e756d3f49cfc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:16:86:53:21:86:42:0b:6d:fa:51:32:3c:
4e:b6:6b:71:82:1f:d7:7f:db:27:14:ad:eb:c8:4c:
ef:39:77:f4:9f:68:f4:47:0d:a0:e0:9c:29:e3:91:
c5:9b:f6:82:c2:0a:ee:f9:59:5e:2d:bf:93:19:89:
cc:31:97:62:d6:5d:d0:d1:3c:ea:31:bf:1e:4f:19:
cc:b5:48:a6:0f:40:e7:00:d5:9f:ea:70:11:4e:a4:
0e:93:46:06:b9:f9:e9:d7:c5:ee:04:16:65:45:35:
ca:29:ef:70:0c:32:e1:64:7d:ce:8d:88:75:04:2f:
4d:cd:0c:28:92:b0:41:36:8f:c1:b5:c9:ee:e3:23:
e6:04:fa:2f:53:aa:06:41:d0:ca:6a:df:a2:cc:b9:
50:4d:b1:7e:9a:cc:a6:7a:46:a9:f9:0e:74:04:ff:
d9:7c:e4:50:09:6b:5a:74:6e:c6:c5:97:0f:92:c1:
1c:94:df:a6:f5:f6:fa:a3:ff:f9:e0:99:64:22:a9:
78:88:53:77:c2:2d:55:a8:59:e2:1a:1d:fc:b4:14:
f8:7f:b7:62:f8:0b:66:b3:b1:35:52:1a:2b:dd:68:
88:b9:73:e8:07:79:14:e5:d5:7b:b5:f8:19:c5:a2:
a8:54:90:73:08:55:54:46:cb:68:81:1b:33:f0:49:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:1F:D4:EC:D5:CE:CC:62:EB:5C:0A:E5:E7:56:D3:F4:9C:FC:1F
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bc:68:d8:3e:1a:05:67:e5:39:0a:5c:7c:c9:f0:c5:47:60:
5b:1f:ca:ea:c2:68:b0:98:98:21:11:e8:2a:02:ac:26:cb:41:
38:d3:b9:6b:5f:98:b0:c1:76:3e:9e:81:ee:55:84:81:56:67:
fe:bd:22:7b:dd:3c:96:2b:ec:9d:e0:40:38:61:dd:7f:d8:bf:
26:33:de:b9:81:90:1c:0a:c4:a8:34:cd:0b:bd:b3:b6:b7:4f:
3c:79:fb:77:a4:76:e1:a5:03:af:b4:c0:2e:57:67:c2:c3:d9:
41:d2:37:5c:36:46:7b:27:ff:d4:96:7a:da:89:cb:8e:3d:af:
e6:93:d0:33:a9:e9:ae:93:3b:ad:68:c4:64:d6:91:5e:12:90:
af:d0:5e:0a:0d:71:c5:df:f6:6a:ca:ed:29:d2:df:d3:3f:7e:
30:91:9d:95:b9:5e:d9:dc:73:06:31:09:2b:da:9e:07:18:3d:
69:13:2a:1d:a6:76:75:2e:cb:01:38:52:eb:da:10:3d:8c:da:
84:f7:3d:58:23:3c:96:c5:1c:61:07:02:6c:17:cc:26:d0:b8:
92:81:77:95:95:20:1f:b2:07:05:2d:41:3e:c0:c9:3e:d7:bc:
db:b8:75:1c:66:74:03:3d:d3:b6:e9:78:c5:27:85:fa:2d:36:
4c:4c:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:16:46 2025 by rpki-client