Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: KPfax9POjXrvnEE3kI4Ot/qCLfVb81rheTfm+JF24JI=
Subject key identifier: 80:D4:F1:B0:3B:14:E5:EE:39:45:AC:D1:36:F5:C6:90:BB:19:65:CF
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 0195E15A177DE0EFD1A0EDD1EE591B274FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1416
Signing time: Sat 29 Mar 2025 10:02:12 +0000
Manifest this update: Sat 29 Mar 2025 10:02:12 +0000
Manifest next update: Sun 30 Mar 2025 10:02:12 +0000
Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: kiQ5oYl5vEPiGvXZRiuB489DvFDMVjt24FQsfQAWUOU=)
2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:17:7d:e0:ef:d1:a0:ed:d1:ee:59:1b:27:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Mar 29 10:02:12 2025 GMT
Not After : Mar 30 10:02:12 2025 GMT
Subject: CN=80d4f1b03b14e5ee3945acd136f5c690bb1965cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:b2:3a:2c:df:33:42:5e:54:78:73:c2:73:
6c:cd:7c:a8:82:32:b7:3e:8c:a5:30:05:09:a7:ba:
bf:1a:58:ae:3d:1f:f1:f5:cd:40:ce:d2:4b:08:0d:
24:23:67:62:f0:94:23:da:21:14:c3:99:5e:75:52:
0e:85:e9:ac:3a:9c:9c:6d:9c:3d:30:14:93:94:09:
48:21:a0:8e:5a:62:c8:dd:59:e5:cd:30:86:a0:1d:
26:6e:48:88:05:3b:37:7c:d0:03:1f:3e:4e:78:5d:
5a:fd:a3:42:8f:a9:d4:53:4f:55:27:bb:2f:f8:50:
2a:4a:d0:47:d9:12:a3:98:6b:a2:4a:d6:5d:53:8b:
8b:da:54:26:fb:39:34:bf:67:44:4b:52:dd:29:f8:
72:0a:7e:ec:b0:86:c3:73:11:24:ea:32:30:52:f1:
92:80:ee:1e:db:24:68:ff:ca:aa:5f:e6:39:e3:71:
ca:47:e5:c3:e9:be:9f:2c:02:ca:94:98:b6:04:7d:
94:43:54:8f:81:ed:3b:1b:e0:67:9f:ca:3c:86:78:
a6:c4:0d:87:58:73:28:3f:b7:2d:67:fb:b6:fb:67:
c8:71:26:da:cb:34:39:da:4b:2c:df:1c:f5:f0:8f:
ed:88:0c:d8:81:a0:81:75:b4:79:19:85:58:a2:f9:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:F1:B0:3B:14:E5:EE:39:45:AC:D1:36:F5:C6:90:BB:19:65:CF
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0a:67:ee:0b:79:21:08:7a:0e:6a:73:bf:86:f8:59:22:2f:
60:c6:ca:80:d1:c2:39:62:3d:99:51:c1:58:d8:5b:31:ae:5a:
b7:3f:7f:31:f8:57:d1:7f:40:22:e6:f0:c6:c9:65:4e:f9:5e:
70:1d:0e:e8:12:c2:c9:e8:40:16:00:5b:73:ca:95:0a:22:aa:
bc:2f:e8:da:ac:cd:b3:00:45:bb:54:13:7c:3f:cc:b2:45:a2:
39:8e:39:f4:df:6f:6e:bf:ec:ce:65:cf:b3:93:65:43:e3:3d:
47:bd:f2:51:51:d8:cf:70:df:9f:ba:33:6b:03:de:c3:4c:1d:
58:c1:4c:36:b6:1a:6b:52:54:96:e4:45:b5:58:d5:54:1a:33:
29:68:65:6a:c7:27:35:a2:95:26:c8:ad:3c:9f:da:e5:6e:02:
a0:e4:09:6c:ff:5c:70:e5:66:ff:fb:73:da:60:f7:fb:4e:1c:
72:aa:80:d2:58:bf:3e:7b:ea:7e:dc:66:98:82:59:58:00:5d:
fc:62:aa:bf:23:fe:81:2a:eb:1d:fe:65:84:9b:6c:a7:f9:16:
37:8c:5e:9d:62:d7:ea:1d:98:85:5c:69:9d:fe:9d:07:a8:50:
9a:e0:98:2d:12:53:b6:08:4f:a0:50:b3:0e:9d:f2:b4:04:4f:
a9:98:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:10 2025 by rpki-client