Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: LJ1rW3lIsQ9jkUX6yEDdNeFqcs4Cshk5APWiLdECMmM=
Subject key identifier: 5E:C0:C9:C0:0E:40:25:D9:C9:5E:AF:AA:DB:85:83:29:A9:15:EB:43
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0194BC73079A11EA8886464272DCA15F26D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 090D
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: 3SyKLJ3z6Ne7NmDrx6ulQeBsKX2dat/PywZjvv+ryyY=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:9a:11:ea:88:86:46:42:72:dc:a1:5f:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=5ec0c9c00e4025d9c95eafaadb858329a915eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:25:12:17:68:06:1f:3b:a2:f1:f7:39:06:
aa:3e:78:02:34:06:80:0c:0e:38:db:5b:9f:6b:17:
6d:3a:9c:d9:89:eb:a8:4f:45:20:e4:4a:08:7e:32:
fa:a0:ad:db:1c:4d:11:fa:16:05:0a:ca:de:b7:98:
af:39:60:09:d4:b3:6e:e7:e3:de:88:f4:9e:43:31:
1d:f5:ed:d9:3d:07:83:e1:dc:c5:ae:0f:e3:a2:00:
9c:df:1c:a2:1c:0a:9b:c9:56:fe:f3:86:da:ac:4f:
a9:de:3d:41:7f:ac:14:ba:f6:1b:47:87:0d:c6:c1:
fa:81:82:9b:38:63:5a:8a:e0:f3:eb:a1:9b:4a:bf:
63:77:b2:f8:72:b9:7f:f1:2d:bb:02:46:1f:26:46:
9b:19:81:1c:fa:ce:dc:6c:1f:18:9d:07:a0:9b:12:
0f:ca:39:23:e7:df:45:76:e6:50:d5:c8:63:65:c4:
8a:46:3b:45:59:f2:d9:89:ae:9f:c1:bd:ab:a1:53:
6d:52:36:63:29:3a:2b:31:51:51:42:f9:58:07:d9:
cd:16:ed:6b:07:28:d1:55:e4:7e:dc:b4:52:68:1f:
6b:12:da:d8:bf:93:60:aa:51:33:b4:7a:77:da:a6:
e5:d9:30:c0:74:ab:61:d3:48:0f:4f:16:95:8f:04:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C0:C9:C0:0E:40:25:D9:C9:5E:AF:AA:DB:85:83:29:A9:15:EB:43
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:50:0a:55:3c:de:a6:3a:31:2b:c9:94:2a:af:31:17:ea:3f:
50:1b:77:d7:d1:69:77:e1:cc:7a:18:fd:3a:92:ee:40:ce:09:
91:4d:e6:4d:78:1d:c2:9c:40:84:f7:9e:10:6a:60:7b:a1:55:
8b:d3:46:05:a9:ca:7e:30:cc:1b:f2:f7:d1:b2:d6:25:c4:1b:
8e:93:76:46:b5:52:93:30:a6:65:93:db:05:f5:4b:f3:7f:0d:
8d:66:de:ab:a0:7d:28:d1:e5:97:f2:c1:42:66:f7:3b:9e:8e:
86:76:08:2a:12:8d:71:eb:2e:0f:09:5e:64:94:72:6c:3e:89:
d0:b4:2a:3a:b8:b9:f0:f9:0c:b0:41:c9:96:61:4f:28:95:6b:
ae:00:9e:1f:1d:6f:f0:64:e6:c2:26:33:86:4f:e1:a8:84:53:
21:5b:a3:aa:ab:c0:f3:4f:c9:25:a7:e7:bd:9b:cb:20:51:c1:
24:37:fc:92:10:a8:a3:6f:28:cc:35:0d:74:52:b1:a9:51:7c:
b7:e5:44:51:42:57:5a:5c:73:2b:c3:25:22:49:88:f4:49:c9:
e7:b4:7b:29:e8:73:95:d8:ec:f6:34:0b:54:b6:28:d0:db:b1:
57:5e:0d:14:ea:27:05:9c:15:58:30:13:32:c0:5d:4c:d4:78:
ed:00:4a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:23 2025 by rpki-client