Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
File: Qk6L1SWxme3BtzktogIl90iW2p0.mft (raw, json)
Hash identifier: q6lvbugAiqr7V9DYQjAcQOTOB3UGxse9wpj4/i7n3ug=
Subject key identifier: 3F:15:A4:06:8F:F6:28:32:EB:2E:AC:91:74:51:86:59:DD:04:9E:AF
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: 018513F035978E214A2A5765A7DCD140CD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
Manifest number: 04DF
Signing time: Thu 15 Dec 2022 03:59:47 +0000
Manifest this update: Thu 15 Dec 2022 03:59:47 +0000
Manifest next update: Fri 16 Dec 2022 03:59:47 +0000
Files and hashes: 1: Qk6L1SWxme3BtzktogIl90iW2p0.crl (hash: 8pifodCiqJwt704I3L99Qtn7HiDE3PJAFTkTmz5xPRI=)
2: zbtSewn09aoIVPf1KosylFeVo8c.roa (hash: GgTF8kBsUZm4jfYNB3PKxihTdHuckb9M4l529ILanzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:f0:35:97:8e:21:4a:2a:57:65:a7:dc:d1:40:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Dec 15 03:59:47 2022 GMT
Not After : Dec 16 03:59:47 2022 GMT
Subject: CN=3f15a4068ff62832eb2eac9174518659dd049eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:40:d4:fd:20:04:27:2a:3b:7e:66:12:6b:
a4:e0:0c:5c:7a:84:34:13:de:61:fb:68:20:40:ec:
fe:36:4e:0c:68:3c:91:a0:db:98:9d:94:02:9a:21:
da:d2:f0:71:2d:d6:2e:e2:36:a6:23:4c:bf:cb:ed:
b9:36:2f:63:7e:bc:78:34:4d:e2:ad:ea:1f:81:45:
08:3b:a7:85:12:4a:16:41:2b:ff:7c:75:e2:0c:48:
f8:e2:15:17:26:8b:6a:35:a4:9f:85:6f:c8:77:07:
04:cd:2f:e5:5e:c0:b9:40:43:a5:0d:00:3a:98:ad:
c4:8f:22:99:c1:fd:c1:20:bd:da:5c:a9:b5:e4:f4:
df:0a:8f:8b:85:fd:04:95:6e:a9:06:d4:83:da:15:
60:ff:d7:d4:83:04:e7:d8:c9:fe:06:25:58:59:0c:
17:ad:0a:8f:52:62:fa:af:db:68:9a:3b:f7:e8:46:
c8:38:ab:07:8a:4d:9c:a6:1b:5c:dc:9a:fa:52:21:
a9:f6:3e:19:38:7e:04:86:c5:4a:c9:ef:63:81:72:
c3:c1:15:7f:b3:4d:89:59:a0:ff:c9:b2:88:04:59:
09:07:4f:01:4d:48:46:43:25:16:01:e8:6e:4d:e8:
18:8b:0b:19:05:ea:59:2f:af:1c:23:bc:da:aa:b1:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:A4:06:8F:F6:28:32:EB:2E:AC:91:74:51:86:59:DD:04:9E:AF
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:59:f8:df:35:47:91:46:df:7b:97:ba:7d:eb:fd:3d:72:6c:
24:b8:a7:8d:e3:d1:f3:be:f3:41:d9:66:ec:d9:c8:8a:e3:5d:
ad:67:b9:9a:09:90:dd:59:4e:fe:2b:b4:70:ea:3c:e8:f6:7e:
e0:66:67:6f:78:dc:f9:9b:5b:1b:91:a3:58:46:9c:cb:37:25:
a3:18:fd:80:59:7e:22:d3:b2:44:de:82:3d:9b:72:4e:5b:f8:
dc:7a:6c:f4:dd:54:fa:e1:1f:b4:6a:bf:96:17:cc:56:ba:f5:
f8:a6:c8:72:28:98:a3:ab:e6:27:ae:b0:86:c5:8e:d3:a7:8a:
c0:93:87:19:83:e4:fe:56:19:59:25:12:51:45:e9:50:06:38:
f4:93:13:7e:55:87:47:82:c0:2b:a2:c3:61:e6:f6:bc:6e:3d:
fc:b2:79:7c:b3:8d:96:dc:e0:4b:db:42:83:b2:2e:39:c4:a6:
65:20:bc:aa:26:6b:30:d9:59:70:08:6a:01:bb:3d:29:cd:2a:
60:01:f0:fe:2a:21:32:09:cf:1a:ea:f6:f7:31:00:b0:2e:65:
c0:bf:58:1c:47:0b:c9:c1:32:79:eb:a0:c0:e5:db:f4:1e:6b:
dd:3d:67:90:c0:96:53:a4:f3:e8:ad:f1:6a:30:d5:33:f9:4c:
f0:0f:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:52 2025 by rpki-client