Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
File: QDx-hd5J15JM5Q09ap5S6enC4xI.mft (raw, json)
Hash identifier: bAq6PvGfGL8S7Pr23QpMac40ALTIF4fA2cECvZ7PRiM=
Subject key identifier: AD:72:4A:F8:A1:1D:6C:50:F2:29:07:83:45:29:AF:3D:CE:78:95:CE
Authority key identifier: 40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
Certificate issuer: /CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Certificate serial: 01962ECF68B13F20A7D13D87502CB91C8CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
Manifest number: 12B0
Signing time: Sun 13 Apr 2025 11:01:06 +0000
Manifest this update: Sun 13 Apr 2025 11:01:06 +0000
Manifest next update: Mon 14 Apr 2025 11:01:06 +0000
Files and hashes: 1: QDx-hd5J15JM5Q09ap5S6enC4xI.crl (hash: mxCSzrr3qtth//KJUPLcl8Klx+V5Djdxf7k2EgHjQvQ=)
2: zBQLlk6R8SMqXeJs9KlWAq-2zWs.roa (hash: H5Z9T6mivR2DyTqTRYiFtEvpcqAnMQHqnVNqaL10pMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:68:b1:3f:20:a7:d1:3d:87:50:2c:b9:1c:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403c7e85de49d7924ce50d3d6a9e52e9e9c2e312
Validity
Not Before: Apr 13 11:01:06 2025 GMT
Not After : Apr 14 11:01:06 2025 GMT
Subject: CN=ad724af8a11d6c50f22907834529af3dce7895ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:cc:c6:77:b5:8f:f0:2f:f3:08:08:14:2b:
27:33:08:77:3f:41:5a:0e:84:8c:de:df:8f:e4:31:
40:b3:ec:57:50:38:6b:13:70:c3:61:7a:40:c4:eb:
47:d9:a6:3a:8d:e7:8c:32:1b:da:05:0b:4c:fd:84:
64:2f:06:bf:61:b4:96:7b:35:5f:a8:39:ec:60:fc:
10:84:ab:0c:94:6f:90:cc:05:60:6b:24:2e:38:cc:
8a:19:f0:2b:d1:e7:c2:7f:42:ab:44:d1:d8:e5:c4:
f1:d3:47:68:ca:1f:c5:0e:58:37:04:a0:dc:84:77:
98:b5:ac:26:d8:08:52:47:22:c0:5b:4e:38:05:44:
b8:03:76:f6:21:b8:5d:10:c4:a5:ea:af:77:3c:a1:
f7:4f:4f:5e:2d:88:9f:53:fc:72:2c:43:a8:df:1f:
9f:62:56:9e:f3:03:6d:d5:35:bd:45:77:8a:e2:e0:
23:d5:dc:70:ee:3a:1f:66:78:8b:68:d8:cc:12:ed:
e0:af:69:b1:91:bd:b2:01:e5:e9:19:54:d6:bd:36:
96:31:bd:b9:12:f9:a0:0c:3d:71:18:9e:c6:bb:fe:
ec:e9:ac:7c:ab:24:31:f3:02:d9:82:2e:c6:fd:d7:
0d:07:fb:7a:45:42:ab:21:05:e3:ff:d5:cf:e5:e5:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:72:4A:F8:A1:1D:6C:50:F2:29:07:83:45:29:AF:3D:CE:78:95:CE
X509v3 Authority Key Identifier:
keyid:40:3C:7E:85:DE:49:D7:92:4C:E5:0D:3D:6A:9E:52:E9:E9:C2:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDx-hd5J15JM5Q09ap5S6enC4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0a0078-648f-4360-94c7-0d6dcb0ecfcf/1/QDx-hd5J15JM5Q09ap5S6enC4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4a:6d:5b:3e:b5:ce:2d:b7:41:7f:47:ab:e8:7a:7b:c8:0e:
be:ea:18:90:bd:a0:5f:95:34:09:83:30:f3:04:a8:9b:c7:86:
c2:04:53:6a:74:1b:7c:94:c7:fd:55:cc:63:0d:1a:ff:49:ba:
6c:79:85:c8:4b:b5:48:9e:24:54:46:4b:ed:7d:82:2e:d8:44:
67:38:3b:52:8e:30:cc:50:fa:ac:ea:db:d5:eb:9a:ff:fc:4e:
6e:3a:84:5a:b7:c7:35:25:ae:be:bc:4a:6d:cc:c4:d3:a6:33:
b6:8c:3f:de:e9:6b:3d:1a:7b:2b:d2:c7:2a:d2:f6:55:ab:67:
dd:f3:be:03:a3:5b:b4:89:73:c7:a8:48:6e:aa:a3:50:1f:86:
f0:7e:ea:de:de:f3:43:46:b2:42:20:6e:4d:bc:99:f2:b3:af:
3f:b4:e7:b4:b9:2d:19:5b:e2:3f:66:67:d7:ba:2f:77:d5:07:
78:46:ed:db:d6:99:9f:94:0a:58:19:73:70:d6:c8:0f:71:2e:
47:19:be:a9:05:e2:f7:f5:c9:56:4b:21:1f:27:e3:01:a4:32:
a4:cf:9b:a2:58:3d:2f:2c:16:a8:f4:1a:dc:63:7f:be:6d:50:
7b:d2:75:4d:bf:b1:ea:c6:3a:e5:75:d8:ea:30:d3:1a:ee:d4:
5b:f5:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net