Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: eTfnHaYmRC6Xx8v17ih+ybPm7K2l06t9ip/sb0R2JZA=
Subject key identifier: 04:08:03:F3:72:7A:98:28:DB:3E:53:5C:4A:80:43:29:33:28:2A:2D
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 0194BC3CAC95279D9606BA9352416A9961E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0B67
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: ZMvmHypa3Vnv9DbtNtkI8OtI/YmXhpdNdTJmQBdMGtg=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ac:95:27:9d:96:06:ba:93:52:41:6a:99:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=040803f3727a9828db3e535c4a80432933282a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:f1:27:08:9f:a7:c7:b8:4f:b9:f7:fd:6a:
d2:0a:74:8b:e7:be:c3:7e:e8:2a:a8:f8:fa:7a:59:
64:65:25:71:b4:bd:b6:89:17:78:4e:d5:dd:03:a3:
d7:2d:fd:fc:a2:b3:a2:10:28:51:17:f5:95:02:47:
8e:3b:b6:c9:c9:5e:95:43:f5:a0:7e:1f:dc:d8:b3:
b0:5d:9a:09:76:e0:10:e0:4e:27:10:22:1a:40:d9:
03:3d:cd:78:6a:71:2b:dc:85:3d:20:41:ef:d3:4c:
a5:4e:87:62:33:42:4a:49:ca:b2:d1:63:0c:d5:da:
3e:c0:0c:1d:7b:2e:ff:a9:fb:e9:c0:19:92:3c:4c:
25:2f:ee:0e:86:7b:e0:e6:94:e6:e3:99:b9:ab:50:
8d:05:b6:57:e9:b0:03:f7:f6:68:14:1a:26:99:8f:
65:57:07:fe:02:f1:bc:a4:91:f5:d9:20:bd:0a:d6:
4e:0e:df:fd:b7:86:de:1e:83:fb:e3:15:53:5f:60:
c0:43:02:5a:5a:57:62:fe:81:db:66:1c:1c:6a:b2:
29:d2:c3:d3:cb:24:03:e9:b1:f4:2d:ab:54:44:12:
57:ab:95:dc:2c:a0:1e:47:ec:4c:1b:e9:ba:8e:4b:
3a:cd:e8:05:48:99:31:6f:67:6c:ca:c1:f6:05:86:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:03:F3:72:7A:98:28:DB:3E:53:5C:4A:80:43:29:33:28:2A:2D
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5d:62:d2:57:c0:3c:3e:c9:f8:93:71:75:99:7a:38:88:7b:
b2:1d:4f:ea:08:d5:db:50:db:ce:a7:0f:ad:0d:2a:4a:81:f1:
ac:2d:e3:e4:16:80:e0:2e:7c:0a:f7:33:35:20:8b:23:1a:4a:
ed:36:5e:ef:e9:82:1b:e7:ee:aa:d5:81:03:7f:ca:14:31:d4:
ed:40:47:81:cd:9d:22:b4:be:4f:a1:9c:0f:57:a8:7c:e6:b6:
d5:d6:32:f6:ec:22:af:14:49:66:7a:1e:be:cf:3e:b4:b7:64:
4a:f1:79:7d:27:c9:6f:96:a3:da:bd:3c:48:31:4f:05:d1:5a:
2a:37:01:39:c2:00:5b:fe:36:b6:23:cb:68:86:8a:2d:9d:54:
4c:56:6e:2a:4f:71:25:ee:18:64:5a:ea:37:9a:41:cf:ba:bf:
c7:2a:12:ff:f6:d6:1e:e7:81:c4:f4:97:38:00:49:cc:29:ec:
cd:a7:fc:91:3b:17:ae:ee:e4:60:f7:2e:ea:05:30:a9:20:8b:
89:82:a8:82:2c:6e:f4:14:71:79:09:06:c9:1e:be:eb:8f:64:
aa:f7:b1:61:ce:93:fe:86:df:69:74:d6:22:c3:9a:69:4f:be:
e3:0c:96:68:9b:88:f3:48:6b:bf:b9:fb:58:c1:0d:0f:a3:fa:
e4:a5:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:14 2025 by rpki-client