Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: cZjGZeuv6NOXyi+9myfhE5S/F96LtJ/0MDpBudI8Wj0=
Subject key identifier: 6A:7B:1A:FE:66:7A:E1:C0:39:52:16:0E:13:0E:38:56:4B:56:E5:39
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0194BBCEFF62F6747EDC400D21B63C9A3635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: pF+hYiyhTIS5t4/yRTkCbS01SPxmCrRZIkv5nidgucw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:62:f6:74:7e:dc:40:0d:21:b6:3c:9a:36:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=6a7b1afe667ae1c03952160e130e38564b56e539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:30:5c:5f:19:d1:24:bd:cf:e8:ff:39:76:
23:3d:24:bb:a6:3a:1e:19:b8:e4:bc:20:aa:2f:04:
07:23:1c:51:f2:67:82:e3:4c:52:d2:b6:db:98:5f:
25:25:35:4e:6d:5d:cd:a9:0d:79:b0:cf:eb:47:b1:
07:91:5f:c6:bd:4a:13:19:7b:45:a0:f2:d8:dc:f3:
48:cd:77:5e:7d:e9:1a:7c:85:fa:54:b6:f5:3f:92:
6f:b8:b9:62:b8:ef:87:50:6d:9a:e3:c1:35:47:46:
99:1c:d0:c0:8c:bf:c4:c5:e2:6b:8c:83:6d:2b:ac:
54:12:73:1a:87:10:66:11:51:4f:76:51:66:82:cd:
61:f5:db:c5:c1:55:3e:41:12:42:f3:34:be:f8:1b:
78:24:3d:ce:06:4b:35:50:88:d4:75:76:07:2b:2f:
8b:74:f8:27:77:ec:69:a5:1e:f8:4c:a6:4f:79:eb:
50:81:45:1c:76:8c:6b:b6:b3:07:71:32:40:59:de:
f8:c8:61:15:8e:8a:ec:ad:38:56:78:f5:1f:67:97:
eb:92:28:d2:af:70:e8:07:86:c5:26:48:43:95:6e:
02:55:53:95:b7:6c:58:63:c1:3a:a8:15:6a:b2:6f:
a3:79:38:ee:f3:b1:d0:09:22:2a:c6:7a:57:14:06:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7B:1A:FE:66:7A:E1:C0:39:52:16:0E:13:0E:38:56:4B:56:E5:39
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:72:2c:fe:32:05:b5:d2:50:25:29:23:17:8f:4a:e9:3f:05:
88:2f:a8:34:77:5b:fb:70:1c:7d:57:18:12:b9:5c:b2:e6:c5:
83:eb:ca:54:4b:91:3c:ca:9c:62:b8:32:9b:ac:92:4e:fe:2a:
bc:6d:f6:a2:1c:81:ff:e6:2f:b8:30:cf:6a:fa:51:4d:fa:6b:
b4:2b:2b:22:5a:1c:d5:1e:dc:43:e3:dc:55:43:39:1f:93:a7:
99:df:ba:98:dd:2c:d8:05:78:93:e7:12:7f:a7:85:b5:54:1f:
8e:86:f4:51:96:d6:91:2c:06:26:13:39:96:ce:79:4e:eb:98:
be:fd:52:1c:3d:7a:b5:26:8f:f6:52:00:92:2e:00:1c:c7:9b:
90:58:03:82:b2:ea:33:74:5d:8a:17:7c:0b:8a:e7:55:32:d3:
da:e5:89:e7:6b:a4:b4:81:c1:23:6d:d6:b9:67:28:d3:6d:a6:
4f:59:ae:01:00:14:a6:56:c0:3e:8d:1f:12:41:4f:56:82:94:
e9:6e:7d:e0:13:e2:b5:7c:44:df:94:9c:90:c9:fd:0c:92:bc:
f3:dc:cf:a6:5c:5b:41:cb:cd:33:fe:d6:3a:e7:36:ed:be:47:
d3:fe:f8:0a:f2:e6:50:fd:fd:5e:31:a0:67:98:71:85:f6:73:
a7:98:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:18 2025 by rpki-client