Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: VDKbG5FxWtNWnUwn5+RGLoVee+GMKs2L1gMEBr8UzQw=
Subject key identifier: AA:3A:79:6D:56:3C:53:58:F0:4B:0A:8A:17:62:41:F3:8B:10:1A:6D
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 0194BD8568C4467C6CC1D2D095F95DCB5CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 05F7
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: tC6s3UPQN/e1ivqJn1dF1CKFWLcXTzTTsYvZDB5plho=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:68:c4:46:7c:6c:c1:d2:d0:95:f9:5d:cb:5c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=aa3a796d563c5358f04b0a8a176241f38b101a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:eb:ad:91:d1:5f:d4:ed:e8:5a:90:dd:81:
78:de:67:2a:8e:00:3c:ea:8b:b5:30:a9:5b:56:34:
4e:64:35:63:ee:80:07:4f:f5:30:95:43:69:0d:5b:
36:76:d3:01:0a:05:2f:74:13:2e:15:08:0c:bd:f1:
f8:5b:fd:d8:b4:d5:8a:68:d6:d4:d2:f3:25:02:53:
75:55:55:23:cf:52:09:56:2f:cb:22:b3:50:58:d3:
02:8f:26:35:4a:4a:d8:7b:88:40:b9:11:60:40:e4:
56:35:d3:96:e3:f4:47:78:25:4f:bc:c4:d0:33:f2:
f6:8f:e4:27:87:7a:a1:21:33:51:ef:4a:1c:0c:b1:
52:15:8b:6c:f1:e8:9b:ba:9e:fe:12:8d:c6:5a:86:
97:eb:f2:81:6d:6b:73:fc:b1:e9:de:6e:34:01:c2:
a2:8a:7b:31:66:a5:f9:e1:f1:54:3e:da:bd:c9:48:
45:ec:14:a7:db:21:1d:a3:d8:98:66:2b:f3:86:2f:
0a:4d:34:ff:b9:dc:86:57:99:d4:b9:a0:31:bf:09:
08:34:ad:f5:e8:c6:b5:64:6b:72:9f:e9:19:f1:6a:
72:fd:0e:3d:6f:5c:69:ad:67:94:0e:ec:3b:9f:36:
72:4e:e3:0f:3e:6e:99:cd:a8:29:e9:d7:8f:da:72:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:79:6D:56:3C:53:58:F0:4B:0A:8A:17:62:41:F3:8B:10:1A:6D
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:73:15:6d:49:0a:2c:bb:5e:40:8b:dd:a1:29:57:a8:2e:
d8:7e:93:a3:9c:f0:90:e8:b7:09:84:99:a9:35:1e:bb:e3:df:
1f:12:c7:e3:e5:6a:fe:78:af:5d:f1:cf:86:75:5c:ce:12:d6:
f3:1b:eb:88:3c:87:45:ab:a2:0f:76:c1:30:7a:d9:52:62:28:
b4:4f:c6:1f:ed:4d:f3:9c:6d:84:1a:b8:52:60:18:f1:8b:1d:
d6:6c:fd:89:e6:76:a0:09:47:d1:fc:cc:47:cf:a8:06:af:ce:
dc:f9:6e:7a:7e:a8:ba:22:2c:08:fd:7f:14:22:da:0b:5b:80:
da:93:43:17:e6:a2:84:7b:a6:6d:ed:66:b6:e9:0c:86:c2:31:
24:71:20:e2:90:ec:9b:19:37:54:bf:5a:47:71:42:67:4b:58:
63:69:35:14:6b:2d:18:8a:0e:8b:00:59:92:0b:f9:0c:7d:c9:
61:9c:29:88:df:87:2d:4a:ef:c8:bb:d8:d0:cb:e8:92:af:97:
6f:7b:26:f4:f5:3b:27:3a:d1:77:d9:38:24:04:db:ef:18:fd:
ee:51:ec:5d:bf:77:2d:55:5e:98:bb:40:b6:32:7a:d6:30:52:
10:27:a4:7e:26:a2:a1:27:4b:35:52:48:7e:3c:3b:b1:65:e4:
fd:58:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:17 2025 by rpki-client