Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File: QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier: uWdzULv4THn0bSNKXAJ96QDJbEuHvO3Zpg+q6ZcFddI=
Subject key identifier: 8D:0A:6F:E2:52:96:1E:55:26:3C:05:BA:41:C5:77:97:37:81:FA:46
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 0194BC3C3BDB6B29B6E9D2043815FDC41880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: Y7MPp2TqZTFU5FzL6P22VthQVqt3YKrRhRcTYnzk9Wk=)
2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3b:db:6b:29:b6:e9:d2:04:38:15:fd:c4:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=8d0a6fe252961e55263c05ba41c577973781fa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:87:3d:02:88:f7:1d:cb:40:b1:72:36:f7:
70:da:c2:eb:d8:58:16:04:b7:b3:bd:85:99:87:d1:
75:9b:88:90:89:5c:cf:ce:90:69:82:3c:f4:71:5d:
8d:79:77:bb:43:e0:b4:6b:2f:d6:c4:0c:fd:c1:8e:
b2:90:39:29:90:1d:f6:a3:f6:62:e2:de:f2:db:29:
79:bf:4d:51:8c:aa:2e:3c:18:d4:d3:4e:20:f7:9b:
e4:7a:1b:d9:72:a1:fb:f2:c0:83:9a:01:e9:4f:0e:
49:a5:f0:82:4e:c2:c3:40:a9:bf:ba:7f:05:1b:a7:
80:d0:97:61:78:95:e8:49:8f:60:de:fc:7d:b6:a1:
f5:d6:88:fe:da:1d:cd:a0:a3:b5:ad:cc:58:e1:1f:
03:63:78:c7:d4:e9:2f:a1:01:68:5d:1a:52:df:47:
04:5c:fa:10:2e:6c:70:d1:48:e4:96:02:b8:cf:ef:
b0:6f:78:24:15:5f:2b:84:86:7c:09:ca:a4:35:bd:
09:50:e7:00:85:3b:8b:27:3a:bb:47:13:6c:8f:c7:
70:65:30:ae:3c:2c:63:73:0d:67:e5:eb:3d:f9:90:
b2:ed:28:b9:23:dd:5c:90:ea:34:90:8f:ef:b4:ba:
8a:95:15:39:b5:19:ee:31:c8:17:85:21:23:c8:f8:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:6F:E2:52:96:1E:55:26:3C:05:BA:41:C5:77:97:37:81:FA:46
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e0:5c:95:0c:68:73:32:4b:e0:fe:fd:04:b4:b3:b9:37:45:
62:31:eb:e1:99:73:38:ac:cd:62:55:00:73:48:a7:cf:62:c7:
09:a4:55:b1:39:89:1f:1a:07:50:c8:f5:35:6b:77:ac:55:70:
6c:fc:4b:eb:28:15:a4:41:b9:55:e4:dd:0d:af:1f:17:5a:a2:
c8:4b:e0:06:a5:2f:a5:ef:c3:89:2f:f3:83:32:73:2a:62:a8:
25:28:a3:e3:6a:96:2b:2b:fb:df:c1:4b:c3:a6:97:97:07:5e:
7c:0c:8c:db:7f:d1:87:59:68:39:f8:80:ff:12:2a:be:bd:ce:
1c:f0:92:55:8c:c9:ef:01:18:d8:62:a4:76:c6:01:08:be:6a:
cc:e1:69:c6:da:03:c0:d9:4d:f9:45:af:bf:93:6c:b5:f7:a6:
be:13:da:9f:0f:c3:e7:68:98:b2:87:07:f7:08:44:f7:a4:99:
0d:d4:b0:6a:9f:c6:a5:ce:b9:a4:8f:89:dd:3f:ea:72:bf:c7:
5f:1c:87:9e:3d:78:93:cb:73:b7:b1:ba:4c:46:5a:eb:19:4f:
6b:f9:c0:c6:39:94:ab:cb:fb:ed:a5:98:aa:f9:f3:9b:04:fd:
02:02:0b:db:f9:ef:97:53:1f:85:c1:50:f9:8d:9e:c4:97:29:
e9:f8:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client