Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: UsJ9eoruO7Hgf/tKsGxSfVGzu/37KY+ncsVW3O3jTdc=
Subject key identifier: 0E:86:34:99:15:0C:40:11:49:F1:A8:F3:FD:29:26:AB:26:42:98:43
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0194BD4EBFC408D4EEC004D2C90BD8EEAB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 01F5
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: TDSnpCEX2QGH2IG8FSmJ97cobLszZc8vK2HvT29WPBc=)
3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bf:c4:08:d4:ee:c0:04:d2:c9:0b:d8:ee:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=0e863499150c401149f1a8f3fd2926ab26429843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:4f:9e:9f:75:e1:e2:01:b8:0c:29:12:4e:
4d:b8:40:ea:c2:53:04:81:d8:aa:b5:92:02:6f:76:
c7:b8:31:ea:74:4c:26:fd:1d:1d:27:44:08:ff:6c:
d8:37:41:4e:bd:4a:12:2c:33:05:80:48:03:5c:7e:
b1:56:b7:4b:68:4e:6a:82:7a:b8:d7:f6:42:ff:58:
17:16:62:8c:5d:fa:1e:bf:58:30:5e:36:ef:33:38:
5e:28:a5:8b:8b:4b:5a:32:41:9f:ca:3f:eb:f8:bc:
fc:a2:1c:f6:c4:af:b9:76:63:5c:6e:8d:e9:c3:2d:
44:76:f3:fc:0b:3f:99:41:5c:2e:03:cd:14:a8:4b:
1b:c2:06:6e:8f:19:60:3b:83:a6:1a:23:22:17:26:
b2:4f:dd:42:70:f0:15:aa:a5:20:69:fd:f5:8e:c2:
40:7a:36:4f:3f:a7:ba:b6:4c:9c:37:3f:5a:39:10:
a3:4f:50:15:5f:fe:18:e7:e5:b2:e4:85:33:ba:d4:
36:ec:e7:69:7f:f9:89:d2:56:9e:a3:a9:7d:91:54:
92:a8:dc:db:71:60:24:3f:5b:cd:33:15:20:af:e5:
11:06:9d:e3:ce:ef:b6:1c:ee:1e:6b:f8:3f:d8:15:
85:2b:04:79:6a:d0:a0:34:07:93:33:28:82:53:9a:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:34:99:15:0C:40:11:49:F1:A8:F3:FD:29:26:AB:26:42:98:43
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:07:78:e0:27:8e:8e:c1:88:84:2e:56:30:e8:d1:a8:59:c6:
2e:a0:f2:92:e7:28:95:69:8a:9a:6c:71:e6:39:23:67:07:6b:
78:57:25:7a:68:8b:4a:21:07:d1:aa:2f:64:77:a5:c4:54:ce:
18:d3:32:82:b5:cf:48:41:e5:88:09:29:c1:36:0f:5e:1e:79:
3c:3a:a0:f8:ef:89:e1:b8:f5:c8:76:c4:bc:94:82:58:25:ab:
49:64:22:91:94:44:28:0f:b6:07:86:9f:83:f2:3c:9e:14:59:
88:e5:81:a3:4a:87:7e:d4:f9:ed:9e:89:fa:ed:a5:92:6b:72:
74:1a:0d:9d:ef:68:73:8b:a9:a6:08:52:71:5d:60:40:50:03:
50:ee:9f:0d:ad:27:d0:01:71:2e:9d:69:80:28:33:af:12:ed:
cc:79:1d:90:b4:18:be:64:91:d2:93:fd:8c:9e:38:32:7b:9b:
2e:d2:27:b4:6c:16:5c:47:ef:dc:2d:9c:74:9f:c2:57:91:3e:
25:9e:8a:c9:e6:cd:0d:8d:79:13:f5:49:58:cc:86:08:7b:b4:
38:9f:69:9a:a5:82:d4:6e:e0:20:b5:12:90:2d:d5:32:78:57:
97:30:61:07:13:ec:e3:45:92:23:c9:f6:b3:6a:e1:f5:11:f8:
e7:59:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:00 2025 by rpki-client