Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.mft
File: QeSLE1UcTzAnIqgPjGLm79U2ntw.mft (raw, json)
Hash identifier: /ZWPol91JWI8k/ynF8gugvnpiVgloXkLDpBRzw93zSI=
Subject key identifier: A2:CF:31:7A:80:4F:A8:32:15:54:A8:96:D3:2D:EE:42:75:DF:6D:F9
Authority key identifier: 41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
Certificate issuer: /CN=41e48b13551c4f302722a80f8c62e6efd5369edc
Certificate serial: 0192D148B10BABA2F04A06D0DDDF5563D001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeSLE1UcTzAnIqgPjGLm79U2ntw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.mft
Manifest number: 132A
Signing time: Mon 28 Oct 2024 04:00:54 +0000
Manifest this update: Mon 28 Oct 2024 04:00:54 +0000
Manifest next update: Tue 29 Oct 2024 04:00:54 +0000
Files and hashes: 1: QeSLE1UcTzAnIqgPjGLm79U2ntw.crl (hash: yOLkpUMkPv7Jo8c1ABBPZNJVNSUeKC+QmIBsmEbk4fM=)
2: hBPWaPUnRQGBA94yIFLf_gO1B4o.roa (hash: motmkS2R+RX1ZVasoBsOLqY3DBqrbnkq1hF5KyGJ7v4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:48:b1:0b:ab:a2:f0:4a:06:d0:dd:df:55:63:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e48b13551c4f302722a80f8c62e6efd5369edc
Validity
Not Before: Oct 28 04:00:54 2024 GMT
Not After : Oct 29 04:00:54 2024 GMT
Subject: CN=a2cf317a804fa8321554a896d32dee4275df6df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:94:99:4c:d4:cd:45:ad:5f:a6:c9:e0:42:
b3:a6:5b:1d:8e:47:3f:c0:97:2d:af:20:ac:63:6c:
59:7c:21:8b:01:8e:be:f8:f8:1c:a4:ac:89:d9:55:
c1:34:0a:a5:40:13:82:d9:ff:25:e3:02:0f:c2:82:
98:ed:2e:29:e5:32:42:50:73:ae:77:e6:a5:4c:3e:
e8:7c:13:cd:9a:b3:9b:ca:21:13:a5:82:dd:1d:a5:
c6:74:ec:c8:d5:56:b5:77:b7:a0:cf:7d:e8:19:4e:
ee:ed:5d:5a:11:1a:21:64:28:95:a4:19:b5:ae:e9:
41:a6:d4:0a:44:a3:c0:cf:0e:29:b8:e6:1f:65:d6:
0d:c7:ed:f5:f8:2a:e3:66:86:16:9e:e1:8c:03:a1:
2e:37:33:b8:03:45:3a:53:1e:41:ef:b3:b3:e6:6d:
99:97:f9:cd:28:b6:98:03:11:12:00:90:78:99:f2:
10:82:2f:03:2c:58:43:62:4e:cd:20:dd:d4:97:ca:
c4:02:b6:8d:03:55:af:22:74:8c:58:1a:b1:e8:dd:
f6:f1:89:13:40:e1:33:e7:28:79:7a:d2:75:37:e7:
ec:6d:77:91:a0:87:f8:f8:8d:f3:47:e6:67:b3:fb:
55:f2:f4:c4:b8:f8:55:9e:3d:52:8e:4c:54:67:0f:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CF:31:7A:80:4F:A8:32:15:54:A8:96:D3:2D:EE:42:75:DF:6D:F9
X509v3 Authority Key Identifier:
keyid:41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeSLE1UcTzAnIqgPjGLm79U2ntw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:31:1d:bd:0f:72:be:a8:82:8d:0e:04:7f:49:f9:00:aa:b1:
a8:0d:f8:3e:ed:07:55:62:a7:b5:d3:b9:59:48:8e:6d:ec:4d:
d5:4e:3a:d1:a9:e0:2b:2c:2f:23:df:89:7a:2e:99:4e:3c:11:
c9:c4:ae:fc:78:59:d1:f5:bd:78:ad:07:a3:25:d0:6e:43:6b:
ba:06:b4:56:a1:c5:75:d2:8e:aa:e2:18:a5:5e:87:d4:2e:da:
0e:cf:50:34:27:e5:fd:99:be:7b:f9:d0:87:d4:4e:1c:95:2f:
9e:44:22:95:d3:63:6e:c7:4d:d8:f6:49:ad:0e:72:b2:13:86:
da:28:97:c7:45:6c:e0:df:d9:21:a7:e3:54:66:a8:4d:5f:c0:
29:f9:1a:ac:2e:e7:91:ea:a7:07:f2:cb:91:ea:ec:83:bd:74:
98:b1:22:63:ef:79:c6:f1:39:ed:88:c5:a5:9e:ba:e6:c3:93:
6a:aa:06:13:d2:69:a1:9c:9f:11:a0:cb:4b:2f:50:fc:a7:79:
da:b2:0e:14:21:b0:54:40:1a:b6:06:b7:be:d7:70:14:c0:ab:
60:34:0b:36:d7:ad:6a:4e:d0:eb:bb:47:3c:8f:50:d3:43:2b:
f3:37:0c:ea:41:d4:c2:7a:cb:c1:79:4b:50:a9:a0:9a:24:ca:
77:96:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:12 2025 by rpki-client