Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: fLxh4RUlzPORFavkI73Ob7nblMXI7AciIljMRKyUCLs=
Subject key identifier: BC:2F:FC:66:3E:20:34:3A:9C:B2:A7:C1:04:F6:CD:92:80:78:B5:BE
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 0194BD8591716A533A6CC22104823C2BEC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: LvEsFqwnIcGrggScBtZtBjNPYkkOynXbOu6K+IUcCSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:71:6a:53:3a:6c:c2:21:04:82:3c:2b:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=bc2ffc663e20343a9cb2a7c104f6cd928078b5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:1b:11:9a:dc:1f:d5:0a:d8:62:07:19:0c:
a8:64:6d:dd:e1:37:0b:21:f3:dd:3f:8e:2b:92:06:
d3:69:45:26:71:c6:55:ce:e8:99:c9:6d:f8:1f:99:
02:47:f2:4d:b5:15:6c:33:3f:69:e8:9b:b0:57:50:
7a:41:6e:39:5a:bf:87:5e:52:9c:dc:4c:13:1c:e6:
96:28:a1:91:3f:77:8c:f8:43:80:dd:01:07:c1:34:
e1:1b:dd:a9:2e:9b:60:3b:bd:c0:42:e8:0d:a7:bc:
25:44:d8:a7:bd:d1:d9:52:fd:76:5f:fc:7d:16:23:
c6:31:d4:8e:bb:94:bc:9d:ad:2a:1d:3b:fb:26:27:
ee:ba:93:06:22:8b:a3:83:99:61:d0:43:62:f3:a7:
0a:63:be:f3:f8:63:9a:87:07:95:cb:f0:0a:61:d7:
a9:8b:b5:df:00:4f:db:dd:e5:f9:d0:5b:59:dd:5b:
5a:c3:ea:2f:c9:b9:75:e5:32:36:23:b8:cf:e1:15:
4a:fc:45:13:fd:7c:3a:91:f2:7a:5f:6c:7d:b8:db:
d7:ed:a4:33:d1:69:06:c2:fe:ce:31:ee:f7:da:10:
8e:c6:33:83:c8:fc:04:b3:54:7a:e2:7c:97:67:d4:
38:00:07:fb:f3:12:09:70:20:86:ec:7d:12:83:6d:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:FC:66:3E:20:34:3A:9C:B2:A7:C1:04:F6:CD:92:80:78:B5:BE
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:02:83:14:73:9c:c4:0a:8f:43:22:10:f2:75:86:f2:2c:
8e:92:e0:aa:25:5c:b8:97:62:7d:51:d8:a4:25:d0:2b:fc:89:
6e:df:14:6b:29:6a:75:8a:68:85:57:c3:62:00:f8:30:2f:9f:
03:1f:98:9d:3b:6e:3d:57:25:e6:78:f8:e4:51:3f:fd:90:c2:
dc:6d:19:7e:e3:54:86:92:65:50:e6:6c:77:f0:c6:96:46:04:
30:dd:c3:80:d4:ae:a3:fb:98:17:d7:b5:b9:81:a2:cc:ef:09:
2e:5c:44:a8:67:2e:0b:ab:99:6e:5e:0f:e7:4a:66:f6:ca:2c:
73:3d:d6:bf:76:d4:52:b8:d2:e7:20:de:36:90:d0:a8:30:60:
99:2b:e5:72:d8:04:27:5e:04:f6:74:2b:57:e4:1b:67:8b:90:
3f:6e:77:73:3b:01:56:46:79:e0:e2:04:18:f1:8b:3c:79:b4:
51:ce:6b:37:90:8b:34:66:e7:11:22:ad:a0:6e:a7:88:43:7c:
9f:5c:71:91:ad:59:a8:4a:2a:ea:cf:24:23:f2:de:f7:05:d4:
db:c2:de:e0:7e:b4:cc:23:53:64:83:35:b2:bf:81:28:58:e3:
b5:26:0f:67:57:97:18:33:04:d3:40:44:bb:c9:52:c1:df:96:
31:81:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:09 2025 by rpki-client