Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File: QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier: kfNsRNQJBBTMNoyKVwVMIHu8cARFFVddLmmTZpk3218=
Subject key identifier: D9:28:82:EB:6C:4D:DA:A1:23:7D:09:8C:B5:BC:4E:26:CE:EC:DB:27
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 0194BD17DC0651123E3DABF2CC61FB2654FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number: 04FB
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (hash: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=)
2: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (hash: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=)
3: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: cimYu5wpmo2mbwCdTCJuxvDlNWxUmI+V1Ah0EWSubEs=)
4: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (hash: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:06:51:12:3e:3d:ab:f2:cc:61:fb:26:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=d92882eb6c4ddaa1237d098cb5bc4e26ceecdb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:be:ae:a4:cb:15:3d:ef:cd:9e:06:02:ab:
7e:a0:93:bb:a0:0b:d2:19:25:3d:c5:c3:6b:6e:f1:
c7:56:07:3f:43:a8:c0:8d:a2:11:44:98:1d:5d:1a:
44:0b:2e:d5:71:be:7c:3e:44:36:c2:54:07:ca:82:
67:70:53:3f:2d:c4:d3:b0:c5:87:4d:8f:90:b1:30:
37:34:19:7e:91:9a:68:ec:b0:ce:2f:95:2c:93:53:
03:c4:92:21:3e:5e:aa:fa:e3:6b:90:6e:21:8f:56:
29:2f:4d:da:8c:43:2b:fa:f9:1f:c1:18:1f:3d:77:
95:eb:c3:eb:d2:a7:72:7a:87:a1:55:a5:91:20:89:
b7:82:a7:a2:a8:2a:4c:bf:c8:71:bd:2c:38:49:40:
62:82:6c:ee:94:37:78:10:ef:45:cd:c1:77:77:8e:
8f:de:92:58:71:0c:6a:93:7f:64:09:98:3d:e4:9a:
30:73:6c:f7:36:8b:05:e9:5f:09:26:5c:7d:3d:a5:
84:54:24:3b:3a:8e:2e:5c:d6:d5:13:40:60:b2:38:
7e:f3:91:e7:12:28:8d:5d:28:b3:bd:82:47:e9:d7:
44:23:92:ba:ea:5e:ec:43:a8:28:b6:81:c4:e0:24:
ad:bc:0d:9d:2d:63:00:cb:ee:90:a6:f2:8c:39:a1:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:82:EB:6C:4D:DA:A1:23:7D:09:8C:B5:BC:4E:26:CE:EC:DB:27
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:06:4e:57:55:ae:e5:eb:3d:79:8f:24:3a:17:a9:ae:5b:
ae:2b:db:11:3b:fb:26:59:df:88:19:e3:2a:7c:ed:73:b1:3c:
9f:95:cc:b2:be:9e:60:8d:fe:84:97:d9:96:84:35:a3:f9:bd:
8c:5a:a0:45:c1:89:81:89:50:13:12:ce:89:cd:7b:35:50:20:
4a:70:a6:2f:e3:ed:34:47:f3:87:b6:b6:e9:14:0a:ff:ea:17:
89:bb:9e:b4:4e:c5:0b:97:5c:c9:ad:df:df:29:2c:8f:41:f5:
8a:4a:6d:41:95:90:88:e4:d3:4d:19:1a:7e:ec:38:1e:d5:26:
8b:a3:89:cf:6f:01:36:26:39:07:cf:b3:0f:a9:e6:27:79:7b:
f2:74:eb:3d:80:a2:d7:0b:77:91:f8:27:66:d7:01:9e:14:a1:
21:0e:61:64:cc:ca:24:27:76:66:96:b2:09:f0:bd:c2:a8:ea:
ef:8d:d2:0c:45:9b:9c:05:de:8d:ee:f4:32:dc:55:25:b2:75:
6f:2c:5d:fc:1f:b2:45:f1:19:c3:a5:99:df:e3:2c:f6:69:f7:
a9:89:66:7b:02:0b:55:59:02:48:0a:58:ba:df:7f:eb:28:ca:
0e:a3:89:e1:3b:9b:49:3b:7f:6a:48:ec:19:4f:17:c4:10:44:
8b:72:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:45 2025 by rpki-client