Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: GtFvTFEQoQdmF2zePtojfQxtS4wCozqHvB7R/1TuVfg=
Subject key identifier: 3E:D1:66:73:86:AD:BC:05:83:CE:0A:B3:43:C2:B5:8A:72:AD:21:CB
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 0194BC3C794A6E88A378B14F167FB72DB9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0A18
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: hSdDfh/R+DY7K0EmUtrZ/KKpodG3zWK5HdfirKljY4I=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:79:4a:6e:88:a3:78:b1:4f:16:7f:b7:2d:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=3ed1667386adbc0583ce0ab343c2b58a72ad21cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:b8:9b:30:cf:da:e1:59:f5:36:f1:e1:ea:
e0:86:af:35:7c:da:81:34:af:bc:a3:e4:b2:4d:a9:
9a:da:d6:b9:3a:4b:fe:59:63:83:d7:40:de:b5:d2:
3b:21:ab:7d:38:ac:e7:a8:c4:ed:c5:12:98:4f:61:
83:7c:be:dd:a3:e0:9a:8a:c8:b3:f8:32:ab:d0:88:
6f:2a:95:b0:99:3e:04:9e:9d:b6:f1:e5:d3:22:be:
2b:95:98:47:79:7c:db:98:3b:fe:45:4e:40:59:bf:
87:1c:57:03:34:fd:99:d8:90:6a:6c:2d:5e:1c:4b:
3e:4a:40:b8:3d:c4:b7:64:86:4b:79:4b:ff:16:95:
23:fb:ba:14:8a:a0:c9:53:77:5d:db:c5:6a:de:d3:
bc:23:31:25:b2:10:a8:85:f4:2d:45:a9:01:99:5a:
8a:0f:46:71:ee:ff:46:52:3e:34:73:49:0c:42:3a:
4d:67:ff:87:18:75:26:87:61:35:5f:66:65:db:d4:
cc:2e:aa:31:57:82:6e:35:7b:39:83:61:c0:12:9f:
38:5c:a1:6c:16:35:fe:aa:9b:03:16:9e:84:32:93:
8b:0e:ea:eb:78:4c:b3:a5:1c:51:cb:ec:78:56:66:
5f:6d:59:ae:ab:9c:0b:6c:2d:94:e1:1a:53:c0:96:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:66:73:86:AD:BC:05:83:CE:0A:B3:43:C2:B5:8A:72:AD:21:CB
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f4:3e:61:37:b8:35:3a:5d:69:76:e4:e9:14:48:47:60:d4:
25:ec:62:49:2b:b6:af:89:77:69:68:b8:85:05:50:41:20:f6:
d0:e1:78:63:65:32:8c:9d:2d:f5:ea:d9:84:de:52:19:34:90:
26:f6:c4:e9:63:bb:eb:f1:4e:9c:05:15:69:79:b2:ef:5c:57:
fe:33:19:9b:7a:ef:49:3b:9a:b9:92:f7:42:22:81:5a:58:1e:
f6:3b:00:01:eb:a4:07:07:f3:b1:d5:4d:f3:d5:33:30:a6:3f:
1d:4c:b0:2a:02:9c:67:c0:9d:58:1d:1e:2e:e0:88:73:4b:8a:
12:74:31:1e:bd:34:2f:21:3d:bc:24:47:b7:2f:21:6b:22:12:
86:81:10:c9:f2:d2:f4:86:5f:6d:9f:c6:da:c8:02:d0:3a:68:
65:4c:a6:d1:bb:a9:27:46:2a:94:14:42:b1:12:cc:e8:e9:d7:
06:3d:36:a4:db:56:94:ae:67:25:58:ca:bb:07:75:e6:2c:5c:
a9:bc:85:4a:cc:f9:3a:bb:bc:e3:18:eb:fc:fd:9f:73:ca:a9:
1e:86:62:ed:b2:99:6c:0b:48:61:16:e0:b2:21:9e:43:67:ff:
8d:db:5e:e9:47:51:3d:da:5d:d3:40:19:b1:37:df:df:da:07:
dd:22:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:27 2025 by rpki-client