Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/Qge67bQGMIKyRd2CYjyYG65W-aw.mft
File: Qge67bQGMIKyRd2CYjyYG65W-aw.mft (raw, json)
Hash identifier: KrJzPZV+x4snSzVb7Zk4uUKHuxLYoWnX/aeiYtoMuj8=
Subject key identifier: EE:8D:EC:BD:DD:D8:48:63:1D:C4:FB:2D:2B:BD:05:4B:76:5F:92:14
Authority key identifier: 42:07:BA:ED:B4:06:30:82:B2:45:DD:82:62:3C:98:1B:AE:56:F9:AC
Certificate issuer: /CN=4207baedb4063082b245dd82623c981bae56f9ac
Certificate serial: 018B607CB1797B5DA67EE798C9AA1C2C2DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qge67bQGMIKyRd2CYjyYG65W-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/Qge67bQGMIKyRd2CYjyYG65W-aw.mft
Manifest number: 0938
Signing time: Tue 24 Oct 2023 07:01:06 +0000
Manifest this update: Tue 24 Oct 2023 07:01:06 +0000
Manifest next update: Wed 25 Oct 2023 07:01:06 +0000
Files and hashes: 1: CO0wbZNu7l8q8j2dCETYIMHij3Y.roa (hash: Au5UiGjbK1AvBh5qsK2d7dGONtin2lRnDoP91v5NYx4=)
2: L9g0X2UrSx_Szp9YE5S0ciH709U.roa (hash: m098HeG67AaHLP0Sq5g7kVp5NWJqSSDuVMAKcwbYbRY=)
3: Qge67bQGMIKyRd2CYjyYG65W-aw.crl (hash: 922QXrpuxaPuyyYctB2E8L6PLI0f5+xBbioBMYSwE60=)
4: n7FEWZ_pFb0r-Z5Lcp9rfVkUIW0.roa (hash: 0ktEk8oxVC3pXHoopJwTJgUyDfqegiXerh6Wf+2rAW4=)
5: xPTQa6JyD8snqWmlk_R4SKLKYrc.roa (hash: UL7zbYOn4+vtE3o3rW8JKyQ/5OHZFhaUadzI4iAx5DU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:7c:b1:79:7b:5d:a6:7e:e7:98:c9:aa:1c:2c:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4207baedb4063082b245dd82623c981bae56f9ac
Validity
Not Before: Oct 24 07:01:06 2023 GMT
Not After : Oct 25 07:01:06 2023 GMT
Subject: CN=ee8decbdddd848631dc4fb2d2bbd054b765f9214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:89:d2:18:b4:52:c6:91:a7:7f:8d:05:60:
38:95:e5:10:a8:25:2b:21:e2:a1:ec:2f:fb:40:63:
17:32:03:70:53:d4:51:50:83:87:5e:56:4b:dc:e3:
da:58:cc:d6:d0:18:1f:87:88:cc:68:81:6e:f6:b1:
25:ed:c5:62:c2:16:c5:90:db:64:d2:9e:5f:d9:f0:
76:3b:8b:37:ad:50:c8:c3:e1:76:7b:61:54:5a:f3:
48:04:35:76:10:94:e5:2c:a5:0c:95:f5:5c:c8:2b:
4f:d5:2a:4e:75:d2:49:d4:a6:1d:2d:91:98:c6:d6:
98:82:d6:c1:f6:87:0d:aa:8a:b1:22:b3:bf:e6:2c:
d4:04:b3:89:51:df:a9:73:5b:6e:d9:34:09:bd:dc:
eb:cb:af:14:59:2e:08:60:c9:1c:8a:2e:c2:31:05:
86:b4:d6:65:3d:66:d5:c5:f3:bd:4f:0d:7e:25:94:
e5:e6:ae:97:69:c2:0c:0c:3e:a2:3c:0a:0c:8e:6c:
5d:4b:f5:60:77:10:86:07:bf:68:aa:1b:ac:4c:99:
8a:db:a2:94:5d:db:40:c4:b7:f6:56:9d:a7:b6:eb:
33:06:87:a0:a5:33:84:45:9d:2f:b5:00:ad:c3:4a:
b0:e8:11:2f:dd:c9:ee:bf:3a:6a:4c:d2:3d:af:15:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8D:EC:BD:DD:D8:48:63:1D:C4:FB:2D:2B:BD:05:4B:76:5F:92:14
X509v3 Authority Key Identifier:
keyid:42:07:BA:ED:B4:06:30:82:B2:45:DD:82:62:3C:98:1B:AE:56:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qge67bQGMIKyRd2CYjyYG65W-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/Qge67bQGMIKyRd2CYjyYG65W-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/531da9-2d79-4a45-9d5c-10dccefce93a/1/Qge67bQGMIKyRd2CYjyYG65W-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e4:03:82:5d:5b:03:e3:43:ec:c7:08:10:6e:e7:ec:80:c8:
b6:ee:8c:e8:39:63:c0:0d:9b:b9:47:71:6e:dd:ec:f1:79:6e:
f1:8d:56:f7:22:96:13:94:b2:d8:72:f0:d0:4f:b1:53:96:77:
f4:52:2a:bc:55:0c:22:f8:c8:34:55:5a:a3:cf:fb:0e:d6:24:
96:f3:58:20:bb:75:6c:38:b7:a7:ec:b2:c1:08:3e:54:97:2f:
23:bf:1f:be:ed:35:4c:6c:0f:39:12:8f:70:ba:b7:6c:67:0e:
70:f6:e8:58:a8:74:32:06:80:08:c4:8d:3b:21:4a:c8:0d:34:
c6:47:82:cb:f7:c9:be:a9:c5:ff:15:a3:01:ea:5c:4d:cd:c4:
35:32:ae:c1:ed:d1:91:21:51:13:a8:fc:0f:49:64:fe:76:0e:
bd:4a:92:f3:01:26:c7:47:13:ab:98:ad:d3:13:c0:aa:0c:f1:
14:ad:53:45:18:df:ce:2e:6f:7b:4a:a6:58:95:7a:3b:48:26:
0a:dc:d0:c7:8f:26:eb:2d:0d:2e:24:ed:59:89:66:08:56:23:
2b:bf:c5:b6:e6:fa:b1:47:0e:5d:cf:71:85:fb:88:dd:c9:29:
67:25:b0:48:b6:f9:47:2b:64:8d:43:d0:73:77:78:1e:04:e6:
78:01:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:25 2025 by rpki-client