Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: XUnE4jtcVqy+yt1AHo6hrfMi0rir4BqD8SV3VpdxVPw=
Subject key identifier: 6B:B8:83:8D:A7:53:2F:E3:CE:57:0B:33:72:53:B5:2F:32:65:17:19
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0194BCA99C62FB4E85688E778FF98D5EAE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: OG7XaOHfpJVSl0stiyHuD4eYM3MlxoNjym6ZVYQ9Z2k=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:62:fb:4e:85:68:8e:77:8f:f9:8d:5e:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=6bb8838da7532fe3ce570b337253b52f32651719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:7d:bf:25:27:13:2e:54:02:aa:d7:67:ac:
93:af:fb:12:ac:e5:02:c4:c0:b4:f4:d9:45:10:ea:
72:5b:ee:5f:ab:a5:ca:09:37:95:b1:61:39:fc:b3:
6d:df:ce:9f:18:1d:ec:20:77:85:f4:a4:e8:99:f2:
e2:1b:9f:97:53:77:bd:c9:6a:74:02:97:92:ec:77:
3a:1b:23:5c:14:ca:7b:69:8d:59:b3:26:37:57:eb:
be:30:16:71:18:c6:8f:9f:a2:01:e8:aa:80:63:e5:
25:4d:2e:ab:3b:81:22:c4:bb:9a:82:df:41:fe:43:
5a:15:e7:dd:df:ee:61:fd:d4:21:c9:9d:9d:f8:15:
e1:72:58:9d:ec:91:6c:41:37:48:71:b2:c4:56:11:
e0:8d:84:ce:56:41:2e:4c:7a:ae:b5:5e:94:11:e7:
92:d1:ed:ea:36:98:48:e3:50:ec:52:65:8a:e5:ef:
af:18:2f:d9:ff:f4:df:06:d8:b5:06:6e:61:0e:10:
59:3d:bc:2d:41:2e:6d:2e:7c:69:f1:96:10:02:7f:
6f:af:e3:bc:ff:49:76:24:3a:db:08:b9:55:6c:e3:
29:f9:01:18:c4:8e:6f:fa:42:de:2a:35:fb:3d:e4:
a5:ea:a8:be:34:ff:0a:a1:56:47:de:12:1e:af:1d:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B8:83:8D:A7:53:2F:E3:CE:57:0B:33:72:53:B5:2F:32:65:17:19
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:29:f7:e1:9c:be:9a:0c:96:c5:a3:aa:c7:67:33:06:f5:
05:2b:72:c8:f9:7f:d0:86:ee:5c:cd:52:be:72:58:f7:d8:70:
37:b7:08:44:ca:40:2e:e6:20:87:e7:12:8b:6e:f5:b8:ef:74:
5b:8e:b6:e8:b4:0d:a6:f3:1b:e9:94:ce:c7:e9:9e:68:f9:5c:
a9:55:8e:74:4e:43:45:4d:37:46:ef:49:fb:06:2d:ea:31:93:
a8:58:b3:3e:b1:0a:e4:cc:21:34:1c:2e:76:c7:80:f3:f0:48:
ab:a8:8c:27:94:fa:54:4b:d8:aa:9c:68:62:54:ad:e6:6f:c9:
d7:3d:af:31:10:c0:85:a7:63:ac:85:81:d0:42:6d:4f:7d:b8:
3e:22:71:a8:7f:25:d0:f5:b5:99:df:bb:26:a8:4a:9c:4e:65:
cf:90:3c:ac:63:0a:68:e0:7f:3d:3d:0f:1c:31:1a:37:4a:fa:
f2:76:fa:83:02:5a:5d:c6:18:e2:c4:3f:30:96:12:30:17:cf:
78:f1:dc:66:6a:e8:6d:73:d9:f5:43:43:69:40:ef:00:fa:cd:
16:08:13:cf:80:d9:ec:fb:c7:05:18:e9:a9:67:b1:fb:78:48:
a0:50:a7:83:16:b9:6a:73:0a:83:b5:8c:a6:b4:55:3c:b1:d9:
e6:b5:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client