
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File: QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier: qkvUXQkveBQjFyUEmAmNx7cglw+vlbwbkgejRC2Yex8=
Subject key identifier: 60:4B:59:67:A4:43:8A:81:BF:DD:1A:4D:3B:4E:DC:56:39:0D:EA:F8
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 01962F071D90FABBA8AFFE2588F47AC73A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 12:01:57 +0000
Manifest this update: Sun 13 Apr 2025 12:01:57 +0000
Manifest next update: Mon 14 Apr 2025 12:01:57 +0000
Files and hashes: 1: QLHEJas53oiAGzs_YSaCGuwaZeU.roa (hash: OfpByeH9dDyJ45cIcWM9guSmvu9MoGjj7YKQgKOyd/0=)
2: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: Ncee65DnSsnjn2kpJE9a5x0o8JQpT8WYULuw3ThdWiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:1d:90:fa:bb:a8:af:fe:25:88:f4:7a:c7:3a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Apr 13 12:01:57 2025 GMT
Not After : Apr 14 12:01:57 2025 GMT
Subject: CN=604b5967a4438a81bfdd1a4d3b4edc56390deaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:d5:2d:93:c4:1b:57:d6:a5:0a:f2:c7:f9:
b9:46:b4:37:57:99:c5:a0:f3:14:7f:7b:05:f7:36:
d5:79:75:80:0e:3e:a1:d8:ab:f5:fe:09:b9:b5:cc:
d0:e6:b4:05:e3:eb:cb:0c:3c:a5:85:ff:90:47:33:
17:b2:bb:90:73:c9:70:8d:f1:8e:26:db:3d:3f:d7:
78:ae:0c:e9:7f:2d:09:03:7b:ff:d9:f2:8b:c8:e1:
d3:50:d2:a5:e3:77:c2:ef:e3:12:d2:9b:a2:1c:6d:
4e:63:49:b1:18:46:b0:67:69:df:9a:00:ed:14:27:
d5:5f:17:a2:5e:30:e9:38:39:84:68:7f:60:15:25:
19:fb:cc:86:ac:7c:2f:47:f4:72:21:73:70:04:1c:
e6:d4:67:fe:bc:fe:9f:71:86:15:5d:f2:a0:13:50:
df:5f:cb:ca:09:a5:12:1a:8e:8f:a5:89:fc:da:70:
69:1f:91:bc:a3:fc:4e:7f:65:93:5e:6c:06:c2:fb:
70:38:9a:71:63:7b:37:42:b7:1d:79:d6:60:51:bf:
92:fd:ba:4a:bd:8d:97:75:55:a9:db:a5:37:f6:d9:
75:b3:93:3c:86:6e:e2:26:df:2e:c8:68:f9:aa:5e:
ca:d7:5a:95:13:c2:1d:8a:7e:8c:d7:bf:b5:4d:75:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:59:67:A4:43:8A:81:BF:DD:1A:4D:3B:4E:DC:56:39:0D:EA:F8
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:28:ed:6b:51:3b:d7:28:86:bd:bb:1b:33:c7:15:8b:d5:ff:
51:2b:27:c2:19:ba:a7:4b:38:b2:fd:b6:5d:4a:91:7d:a9:ef:
e8:6f:2e:7b:ff:e3:01:1f:7e:81:65:23:d3:0a:86:a0:76:12:
61:b9:8b:5c:d2:27:1c:ec:9e:41:98:6d:62:d1:d8:2c:42:f6:
0d:c7:a9:d9:29:9f:fa:59:96:07:23:7d:96:2f:92:9c:9b:6f:
f9:3d:b1:25:5f:f8:6e:4c:c0:5a:0d:13:96:25:b1:26:49:30:
c0:18:92:3b:bc:20:31:0c:93:fe:91:a5:6b:b3:65:98:02:89:
77:5a:3d:ec:23:a7:fa:79:c7:33:a4:ae:c7:cf:f6:61:be:c4:
52:99:55:27:b3:c6:c4:8a:b1:e8:ac:b4:5d:15:24:da:04:c0:
1b:6f:a1:40:50:db:b3:ba:cf:0e:96:3d:82:fc:d8:77:e7:bb:
35:e1:fe:55:a3:b0:8e:05:29:16:05:a4:4d:d4:d4:f2:e9:0b:
43:bf:c1:bc:92:19:d6:02:60:db:64:cc:3f:6a:c8:06:86:ff:
c8:37:e4:37:73:bd:2b:a1:5d:b3:92:f1:17:21:8d:8e:25:83:
be:08:9f:3d:e8:4b:d2:d5:1f:92:c1:cf:39:7a:17:f6:dd:39:
60:6a:47:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net