Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: O1zidZLFM8v1gnhb76+afQCbYxLCD6vH6yvtCq9ypFA=
Subject key identifier: C4:BD:9F:74:6D:F0:6F:DB:1C:75:41:73:E8:04:42:EB:C2:6F:13:6A
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 0194BCAA344B3D80D0D07388FBFD0F6732BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: 3T4IxrfTJ0Xyhu07lNZjVm2R4PzsYWKU9yJPQBYYk9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:4b:3d:80:d0:d0:73:88:fb:fd:0f:67:32:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=c4bd9f746df06fdb1c754173e80442ebc26f136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:b9:85:22:a9:cb:be:17:c2:bc:70:9d:c5:
e8:05:7c:8a:d2:18:ba:17:09:f7:b1:8b:83:ff:16:
bf:f2:22:51:e8:b8:e5:cf:16:36:93:97:68:ad:de:
57:19:92:0e:5c:4a:17:fd:f2:23:09:f4:81:bf:31:
26:0e:bc:45:a2:f7:a4:1f:5b:47:1c:6e:36:f2:3c:
37:c0:e6:43:45:a1:13:06:5f:c7:ea:3a:94:76:70:
2f:20:70:86:a1:27:99:10:88:25:42:80:fa:7a:d4:
75:38:4f:05:b8:8f:ee:8e:99:1f:ad:df:b8:7a:71:
72:8d:68:26:fd:22:07:64:ff:54:5b:30:58:ee:23:
74:ba:20:3e:0b:0e:6a:95:3c:f3:cc:cc:62:10:55:
f4:d3:da:de:7b:42:75:5e:ca:b8:4c:60:22:32:14:
fe:28:a4:d2:f0:89:a4:cd:bb:cb:9a:54:0e:3b:20:
57:55:93:75:07:fa:cd:d3:59:0e:7d:14:55:ff:47:
cf:21:81:e0:ae:02:c8:4f:5c:9b:b1:19:06:c7:7a:
73:48:d0:8b:63:2d:ca:8f:24:50:27:52:ab:f0:8d:
8f:19:f6:46:19:03:5e:b4:bc:b4:24:fb:bf:91:65:
30:74:16:35:f0:94:c4:6b:5b:23:a7:57:02:60:45:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:9F:74:6D:F0:6F:DB:1C:75:41:73:E8:04:42:EB:C2:6F:13:6A
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:29:0d:ef:39:e3:ea:54:ec:71:c6:0c:cd:19:0f:71:95:e0:
76:0b:03:4a:2c:55:4a:54:b6:b0:56:e7:98:1f:95:20:07:42:
4c:35:c8:86:ee:d8:e4:89:03:09:e6:75:32:10:0f:c0:83:14:
6f:52:fb:01:ae:f3:74:88:3c:7c:f4:d0:19:f8:51:e2:53:99:
3f:2a:45:89:97:14:69:ad:1d:47:69:06:c5:99:46:f9:6a:12:
ec:dd:c9:aa:66:d2:58:3b:21:01:db:b6:f3:46:20:46:fe:de:
fe:f1:93:6e:81:e2:51:6d:60:cc:d8:23:7a:57:89:53:e4:5f:
d8:93:76:cb:a4:f9:0f:c4:17:7b:86:80:3b:0f:f5:5e:e2:b1:
01:45:c4:d0:fb:fb:9b:49:5a:2a:03:9b:f3:23:08:84:af:a0:
98:06:2a:93:61:70:f5:c1:35:e7:a1:21:b1:11:1f:38:bd:e9:
54:a0:49:a0:0e:db:8f:5d:62:cf:b3:8d:04:8b:22:0c:fe:9c:
e4:6c:70:78:dc:32:bb:1c:c4:44:c0:f8:f9:7a:17:0b:22:d7:
b8:4d:01:b4:6f:b7:0b:f1:c1:2a:18:a4:93:9b:67:3b:d9:b3:
e1:81:e9:39:8d:4c:5f:82:28:7e:5f:b9:90:bb:80:26:a0:32:
cc:08:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:05 2025 by rpki-client