Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
File: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft (raw, json)
Hash identifier: ybRhfHxCPNeeeEKQo8XB1JfW49Uq+XjF5Id+9j8VAcw=
Subject key identifier: 6E:06:9B:1A:C1:10:9E:03:FF:4A:27:7A:84:B1:0F:FD:4A:24:96:1A
Authority key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
Certificate issuer: /CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Certificate serial: 0194BBCDDBB4492AD33C948BB86CFA8CED6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
Manifest number: 0B4B
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: Ci2nxFCN2-JFxhCGu2Re4yZAOHs.roa (hash: +bhZNarT7FFMkSZsUhSIu2eb8t+79YYtheiLS/N1UY0=)
2: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl (hash: 5wluKBWNOJIBBv+fHQ3FrSYskIfssBg38lL2ZeyJkNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:b4:49:2a:d3:3c:94:8b:b8:6c:fa:8c:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=6e069b1ac1109e03ff4a277a84b10ffd4a24961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:33:ed:68:fb:a3:16:ed:b0:33:b3:35:d4:
4a:36:da:a1:4d:b0:59:89:d6:c9:21:2a:01:8a:a2:
3d:2b:1b:d5:7d:54:9e:eb:b7:6d:04:87:fd:ab:b3:
2b:c8:ab:18:5f:f3:96:da:94:37:11:a7:41:cf:58:
13:1a:f5:f1:17:86:1e:8f:49:39:ec:8a:bf:b5:8f:
66:cf:40:8c:ca:e8:a5:c8:02:6f:db:69:ce:e4:a0:
73:ed:37:72:26:78:6d:ec:d0:07:2a:d5:69:9e:29:
29:95:68:4a:db:c8:a2:bb:09:06:91:63:63:43:81:
4c:63:ab:0c:bc:48:54:85:01:f2:b4:b7:f5:81:b1:
a8:d2:eb:04:b5:f4:66:b1:03:b2:9d:e2:ca:9a:2d:
e6:8c:4b:ff:06:64:bb:07:2f:07:e1:55:bf:bb:37:
6b:01:5a:d0:39:39:c9:96:e4:79:d3:11:4d:60:48:
7f:f6:d2:c5:52:cc:3c:ee:99:86:d4:bf:ee:08:04:
99:08:c5:34:ff:84:d7:ee:13:8d:10:c6:54:e3:22:
80:ee:12:9d:68:54:76:e0:b8:9a:45:c3:b2:6c:13:
3d:a2:82:e6:90:0e:89:fc:62:34:93:5c:f6:ec:b4:
24:46:7b:19:d2:f7:06:46:92:d6:42:f0:9a:99:6c:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:06:9B:1A:C1:10:9E:03:FF:4A:27:7A:84:B1:0F:FD:4A:24:96:1A
X509v3 Authority Key Identifier:
keyid:40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2a:d5:95:88:15:f3:67:dd:a7:ea:7c:c0:0c:11:c9:85:95:
2a:dd:95:a2:a3:c7:83:06:07:04:8f:ca:fe:d0:81:40:e9:5f:
62:5d:d8:91:21:e0:cd:1d:12:9e:e0:cc:b5:ff:c2:fc:be:cc:
22:07:ff:19:00:d9:e1:fb:64:82:ad:85:fa:9c:5d:63:2c:ad:
ec:c1:55:0a:3c:1f:f8:65:e0:99:e9:2f:58:76:cb:43:9a:d6:
2c:cc:e6:11:3c:8f:af:de:4e:35:28:5a:07:46:47:c3:c4:bd:
13:69:cb:36:0e:49:13:0c:1f:01:8c:5a:c3:b5:f3:67:1d:bb:
02:d0:f1:3e:49:70:49:f4:fe:82:03:24:17:58:b8:e5:d2:62:
01:74:c4:9c:50:d5:ba:e4:e7:80:2e:39:d5:9d:b4:cf:8a:67:
12:d5:06:fd:b4:c0:3c:dc:06:99:f6:92:d1:f5:0c:89:a1:de:
16:a8:48:67:5b:9e:00:41:1c:c9:23:d7:5b:58:78:c6:bc:22:
aa:a9:0c:aa:ad:8d:5c:38:62:0c:31:00:00:67:0e:69:b1:2c:
16:33:72:e6:dc:c9:b8:df:cb:70:ba:02:7b:78:81:aa:3d:f4:
fe:ef:63:88:2e:55:a4:10:c4:f4:84:20:b9:4e:56:a6:7d:1e:
2c:22:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:54 2025 by rpki-client