Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.mft
File: QAZN2KxupWZBg21O13-syksi9-A.mft (raw, json)
Hash identifier: Be1zDALUGiq0ml/4dzo00NJHIAHkPuFWjdbR+CUhziw=
Subject key identifier: BD:6E:DD:3F:2D:A9:EC:BD:31:A4:79:F5:AC:52:1B:8F:34:E8:F5:17
Authority key identifier: 40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0
Certificate issuer: /CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
Certificate serial: 0194CBAF3868B99FBB487513F5F08E90354F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.mft
Manifest number: 0FC2
Signing time: Mon 03 Feb 2025 12:00:45 +0000
Manifest this update: Mon 03 Feb 2025 12:00:45 +0000
Manifest next update: Tue 04 Feb 2025 12:00:45 +0000
Files and hashes: 1: QAZN2KxupWZBg21O13-syksi9-A.crl (hash: 4lPrLx62ZA1Ns7SHIbOD8qOMFUbrkxwrIMWWLPKTGUQ=)
2: o_o-PfEQ6HNKhX9KkH8j36w99rI.roa (hash: sipqbmLypIuW6+AJhXLMymWfsUfPFNo3toWDFfinp0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:af:38:68:b9:9f:bb:48:75:13:f5:f0:8e:90:35:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40064dd8ac6ea56641836d4ed77facca4b22f7e0
Validity
Not Before: Feb 3 12:00:45 2025 GMT
Not After : Feb 4 12:00:45 2025 GMT
Subject: CN=bd6edd3f2da9ecbd31a479f5ac521b8f34e8f517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:3d:14:a0:6c:cb:c4:f0:9b:b4:e8:bb:0f:
76:f7:58:a4:a0:af:e9:ad:72:31:ea:8d:62:36:81:
ec:e1:a0:28:ae:6c:cf:00:1e:26:5d:5e:a0:9e:b4:
b5:f7:59:60:b4:79:3a:4a:bd:fd:1f:4e:e5:75:e6:
64:f4:06:b1:60:46:68:51:d4:84:33:86:3e:5f:db:
b5:e6:f8:60:6b:68:61:a7:7a:50:fd:86:a9:ec:96:
06:ab:a2:a2:57:04:e3:8b:17:5d:00:82:46:74:60:
d0:11:1e:16:35:dd:b0:68:5e:29:ac:f3:9a:27:14:
53:2c:d3:61:fc:6c:9e:0a:9f:cf:36:f0:37:72:88:
0e:48:11:ef:2e:65:e5:bf:36:30:95:d0:c0:62:44:
c7:ca:01:7c:94:d0:42:43:f5:2b:d7:9a:4d:98:1b:
26:40:24:e8:3b:77:ab:22:db:c1:06:b6:f6:43:16:
d5:07:df:71:f1:42:be:ac:14:aa:00:2c:ca:d2:ba:
cc:b5:c1:30:89:ba:a8:79:29:51:ae:62:15:51:71:
4c:fd:22:70:73:62:77:28:e1:0f:2e:8c:88:51:33:
0f:4e:d6:10:fe:31:c5:1f:d0:96:e2:7a:57:17:fb:
61:db:1a:c9:9e:e4:04:94:67:50:76:37:da:8f:43:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:DD:3F:2D:A9:EC:BD:31:A4:79:F5:AC:52:1B:8F:34:E8:F5:17
X509v3 Authority Key Identifier:
keyid:40:06:4D:D8:AC:6E:A5:66:41:83:6D:4E:D7:7F:AC:CA:4B:22:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAZN2KxupWZBg21O13-syksi9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d066a3-7122-4dfa-9644-fce7e936bebd/1/QAZN2KxupWZBg21O13-syksi9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:c1:91:4c:85:9a:cf:37:95:69:d1:69:be:4c:0c:d8:20:
4e:70:55:82:dd:0c:93:1e:c0:46:0e:eb:bf:de:9b:b7:b2:ae:
ce:65:8c:5a:eb:c1:29:37:f8:7e:d8:e8:ea:d6:fb:7c:0f:22:
79:6a:16:51:23:b2:35:5e:17:b4:a2:a3:13:ad:9a:d6:85:3b:
f3:38:53:c5:8b:cd:95:6c:e4:cd:99:19:e0:1b:4f:94:43:0f:
15:78:a3:0f:05:2a:5c:c3:26:ed:c4:48:7b:78:2b:2a:78:0d:
ed:b5:da:6f:4b:2d:39:b4:1d:24:74:5c:aa:a8:ff:cc:ca:4f:
0e:2e:fb:fb:95:62:b2:f4:9c:12:b4:55:42:59:e9:00:64:4d:
66:0c:45:92:13:85:91:19:1a:fa:46:07:21:d9:cd:99:3e:0d:
90:af:34:61:df:05:3b:39:be:5e:3f:35:ab:b7:1b:7a:b0:18:
77:4a:7d:76:dc:ce:81:f9:97:35:83:2c:50:18:31:05:b1:8e:
2e:f4:0e:91:a7:63:3c:5c:ee:f9:85:7a:26:64:2a:6d:5f:38:
6b:7d:84:72:e8:80:db:1f:c9:58:01:ca:30:f3:42:3b:0a:c1:
ab:77:c9:4f:ec:1d:88:76:09:90:6f:50:15:37:6e:bb:21:f2:
10:1a:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 07:28:19 2025 by rpki-client