Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File: QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier: Mt4xAh6xSHHoHz1DnqouHBDA183EQeNzmIQAqYD9EXU=
Subject key identifier: 71:28:C4:8F:46:07:66:B0:69:5F:4D:D6:EC:D8:8D:C7:F7:B3:FC:20
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 0195E0B4315A1BBC14D71C3642A47FA7FEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number: 0592
Signing time: Sat 29 Mar 2025 07:01:00 +0000
Manifest this update: Sat 29 Mar 2025 07:01:00 +0000
Manifest next update: Sun 30 Mar 2025 07:01:00 +0000
Files and hashes: 1: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (hash: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=)
2: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (hash: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=)
3: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: szruJyTwFAAxu2vvu6jumtcD3EN510z74UVy1cW7O7o=)
4: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (hash: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:31:5a:1b:bc:14:d7:1c:36:42:a4:7f:a7:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Mar 29 07:01:00 2025 GMT
Not After : Mar 30 07:01:00 2025 GMT
Subject: CN=7128c48f460766b0695f4dd6ecd88dc7f7b3fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:6c:be:db:0a:37:b0:84:e5:a3:3e:6e:cb:
43:80:8c:0b:a8:5c:6d:c7:d6:c1:b0:c5:fd:98:07:
69:c6:06:b5:25:a3:a2:f7:ec:36:42:1b:98:ed:94:
26:eb:fb:02:b5:46:6b:c9:0a:d7:e4:57:35:9d:80:
fb:0d:1d:12:d0:bf:ab:91:15:8b:ca:bf:05:9d:ea:
7d:af:0f:0e:43:98:27:31:d0:57:c1:28:20:c3:a3:
71:e0:69:9f:fb:c7:d0:53:90:c7:51:7d:6a:9d:97:
48:28:15:e5:26:59:30:9b:fa:2c:68:04:a5:be:e2:
d2:8d:61:26:4e:59:41:0a:2a:a9:a5:6c:7a:f9:e8:
8f:64:66:a0:0a:dd:25:0d:7b:c5:61:4c:2b:41:4e:
f0:ba:20:a2:93:0a:02:12:55:2f:52:60:a7:dc:ee:
ad:05:9f:51:5b:6d:41:37:14:cd:7e:12:0a:17:b0:
20:1a:a5:ec:7b:71:be:8d:38:48:22:a9:e9:6e:26:
9b:78:d9:68:f8:56:87:2c:20:ff:93:d0:7a:5a:78:
20:51:a5:69:89:e9:d3:e9:0b:52:57:fc:04:65:cc:
2e:74:0b:c6:00:f0:8e:19:52:e5:59:5d:95:f7:51:
ad:7f:c6:1d:4e:45:9e:d3:69:22:92:90:9f:a7:87:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:C4:8F:46:07:66:B0:69:5F:4D:D6:EC:D8:8D:C7:F7:B3:FC:20
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:63:d6:ae:63:01:fc:3d:94:7a:3d:09:44:1a:82:bb:8a:b4:
1c:0d:7f:8e:53:bc:cf:12:4b:d1:58:f5:77:54:0a:9d:a9:d6:
8c:dc:a2:2f:32:1b:da:f6:96:ad:ee:2e:cd:4f:b4:bb:70:a8:
66:db:9c:4b:5f:b8:f1:41:0c:db:e0:27:9a:4a:df:93:d0:64:
21:e2:a5:7d:a3:61:5c:d4:c3:93:a9:1b:ab:99:c5:eb:fa:2f:
04:c4:a1:aa:a2:f6:ad:eb:cf:e1:22:97:45:b5:c0:69:31:e5:
6f:01:d8:47:b0:05:4c:fe:57:5f:ab:d8:e0:9e:8b:68:30:b2:
5c:44:15:ff:c0:b7:75:21:ef:35:85:72:3b:1e:62:1f:03:ff:
50:27:1b:5f:09:20:7c:79:b5:f3:89:72:9a:2d:0a:05:61:05:
43:35:f7:4c:ef:24:46:82:90:84:5e:c3:70:81:2f:cd:ff:f9:
12:24:76:e7:33:aa:ab:f9:c6:8b:12:1e:72:11:bc:3f:ad:43:
bc:d1:ea:d5:cc:f0:c9:13:51:15:13:bd:84:b5:84:86:17:20:
4d:4e:9f:c9:b4:e6:2b:e8:48:9d:2b:79:61:67:64:e2:16:03:
c7:56:78:a3:09:60:a8:63:5b:c0:e7:63:bd:03:03:b1:a4:eb:
77:65:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:36 2025 by rpki-client