Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
File: QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft (raw, json)
Hash identifier: SznA5AICyqzOMC3YUxUvCBkp9RoR6QycoHmmjZMGgVU=
Subject key identifier: 39:BD:05:FC:D4:5B:30:03:0B:B4:D8:5C:E1:DA:00:C0:3C:7B:2C:1B
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Certificate issuer: /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial: 019470EAF0BE2C706A78F5284276E70CD6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
Manifest number: 4F
Signing time: Thu 16 Jan 2025 21:00:32 +0000
Manifest this update: Thu 16 Jan 2025 21:00:32 +0000
Manifest next update: Fri 17 Jan 2025 21:00:32 +0000
Files and hashes: 1: QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl (hash: TnJTPZ1oqzXQW/VnXwN3fIAe8Iv5G3PXThIBDRIAKdA=)
2: ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa (hash: RDhv3a+rjqy1nFbzdPkoModvDBOI69Vl9+D8sNqVAz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:ea:f0:be:2c:70:6a:78:f5:28:42:76:e7:0c:d6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Validity
Not Before: Jan 16 21:00:32 2025 GMT
Not After : Jan 17 21:00:32 2025 GMT
Subject: CN=39bd05fcd45b30030bb4d85ce1da00c03c7b2c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:03:76:fd:4d:ea:57:8c:24:5a:28:6a:6f:
c4:e8:f6:27:13:66:34:a7:52:6e:64:e7:8b:53:91:
b4:bc:0e:95:ca:0c:bb:8b:c4:8a:01:43:c5:fc:c8:
24:a4:4d:dd:b3:54:1f:20:1c:3f:83:2c:f6:e1:31:
99:20:79:94:4d:c0:6f:50:ca:c5:9c:33:e4:19:bb:
aa:ef:b3:03:b8:9d:27:50:2f:d3:5c:f9:87:d2:76:
3e:2d:74:3d:06:af:fe:86:12:15:6e:82:59:4f:ab:
a5:15:c4:18:45:28:af:ef:30:28:2b:51:32:da:a7:
69:4f:fe:3e:f9:b0:28:ab:81:9a:b9:4c:05:ec:b4:
31:e3:7a:24:ff:96:09:d4:7c:f3:78:6b:82:6a:d7:
57:53:7d:46:cc:33:59:2d:c0:9f:f0:de:06:fe:22:
10:be:0f:bd:5a:bf:bd:10:27:d1:e8:3d:5c:89:a5:
90:bc:bc:73:9d:6a:b8:bc:43:39:76:7e:48:9b:f3:
c6:9f:8f:30:79:a6:0b:9b:0e:86:ba:35:c8:df:38:
df:40:16:a1:30:af:14:c8:4c:00:2e:92:ae:e4:ff:
8a:c6:47:44:08:88:2e:f1:7c:ac:55:6e:73:13:93:
e4:5e:ca:2f:78:87:35:60:c6:0b:14:92:29:2a:d6:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:05:FC:D4:5B:30:03:0B:B4:D8:5C:E1:DA:00:C0:3C:7B:2C:1B
X509v3 Authority Key Identifier:
keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:87:82:c1:a9:2a:00:c8:68:e8:b0:63:2a:5f:20:9e:03:f6:
d5:9e:f8:be:95:45:3e:59:26:65:d5:12:be:6c:92:59:a2:bc:
8f:4e:4d:f9:00:37:6e:59:9b:ae:fc:d2:cb:70:cd:aa:ce:a8:
9f:ef:7b:74:f4:55:8b:44:f7:2e:be:17:63:f0:a0:de:6d:e9:
30:20:ff:dd:75:32:13:a6:e8:88:1c:55:a1:66:33:1c:fa:fb:
7a:2d:4c:2a:53:dc:e8:8b:40:37:e0:bb:c6:b8:ef:fc:95:11:
12:07:65:82:af:7f:c0:9a:fa:cb:17:c4:1b:65:2b:c7:32:43:
26:a8:fd:fd:09:57:0e:0f:39:39:d0:b0:18:00:bc:f1:ac:05:
c2:08:e6:e6:12:89:20:fd:c3:c8:58:36:8f:89:f6:0b:43:07:
01:13:35:50:8d:fd:5a:82:44:d6:fb:a8:bc:45:e9:07:85:75:
d6:6c:5a:15:5d:9b:8e:0b:ed:a8:77:da:55:7c:e3:1d:2c:a9:
9e:f7:30:2a:bc:3f:40:3d:4c:e2:2b:64:1b:72:06:61:a8:b6:
a9:b0:8e:ae:9a:65:90:d1:93:c3:05:60:9e:0c:4d:3f:6f:92:
45:c0:31:19:25:9b:16:fa:76:10:bc:bb:d5:62:a3:a7:21:bf:
13:0a:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:47 2025 by rpki-client