Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: 3UMUUc2KzgHFtOengj0FM88xt15ifa99Q6XPem+JH+A=
Subject key identifier: 41:1C:8D:50:13:63:94:57:FE:B7:6A:C0:92:E6:3D:84:C3:99:50:79
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0194BD857935BA1463EBA20B0DEF4B1BD988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 0330
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: gaxeJASt+wK1D6I3yNKAn35QDCQallCswTfgELWL8A0=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:35:ba:14:63:eb:a2:0b:0d:ef:4b:1b:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=411c8d5013639457feb76ac092e63d84c3995079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:7d:13:c8:df:ee:0a:fd:7a:ce:2e:28:93:
05:e3:1d:b0:ce:82:52:f7:a7:58:21:cd:ce:81:3e:
a5:3f:8e:c2:0e:81:9b:47:c4:69:6a:75:7c:43:9a:
94:93:3a:d1:b4:a4:52:03:f4:f0:3e:8f:54:0f:2b:
2f:41:8e:f2:43:e3:5c:56:15:7c:4f:05:0c:2d:2a:
36:e9:eb:5e:e1:8e:10:e7:66:1a:fe:3f:3c:4f:3a:
2b:5c:59:f5:a0:77:2e:01:dc:ae:eb:fa:34:c7:af:
69:41:63:f5:19:16:28:7b:13:31:18:0f:4e:0c:27:
6b:67:91:6b:3b:87:92:a6:c7:6f:3a:ba:50:79:47:
a5:3f:2d:b9:d0:50:9c:fa:0b:5f:d7:67:02:b8:8a:
1e:5b:02:87:c3:33:61:4f:c7:13:16:0f:0c:af:33:
b1:25:47:8a:16:15:e2:fd:8a:d2:25:41:b7:d4:61:
88:d5:73:11:41:8f:1c:66:2a:ed:aa:83:f8:2d:61:
e4:1e:5e:5f:1b:68:d1:3c:36:e8:5a:f5:ad:ca:c9:
7e:72:77:46:7e:e2:0e:82:b8:9b:3f:9e:18:f2:e5:
49:71:9a:4c:cd:2f:d9:19:5a:13:6e:8c:61:ed:54:
0f:55:15:52:9f:42:63:c5:33:67:97:99:1a:3a:07:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:8D:50:13:63:94:57:FE:B7:6A:C0:92:E6:3D:84:C3:99:50:79
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:70:8b:26:65:e1:04:4a:df:1e:b8:53:d5:54:af:1b:6d:
ed:5e:7b:b6:44:b8:f4:65:0f:a6:7b:fe:83:4a:79:4d:ea:8b:
aa:81:04:22:ba:7f:71:30:98:09:c8:9b:bc:40:86:21:73:4b:
52:10:c4:4b:66:83:75:bd:a1:7e:9f:42:6c:a8:e6:05:38:11:
9b:1f:e4:19:ac:d5:d2:46:9e:f3:3f:8c:c5:a3:06:7b:2d:03:
52:c6:6b:bf:9e:94:42:64:90:34:5c:ad:11:9e:73:d6:45:98:
85:0c:52:c2:c3:05:63:95:6f:5e:40:22:bc:f0:c9:72:d0:2f:
15:86:01:d7:74:02:43:27:d1:50:9b:1a:3e:fd:58:5a:87:87:
e7:b4:d3:ca:b5:ad:5f:7f:42:c9:b4:b4:87:69:11:ef:af:f7:
2d:fe:45:45:84:1f:82:53:3d:94:10:ee:45:84:5c:bd:c5:4f:
0d:4b:09:95:cd:fc:bc:cc:94:80:64:6d:90:39:71:04:d4:05:
3b:dd:dd:46:65:4e:49:d0:11:44:28:a1:9b:df:87:a4:53:06:
ee:a9:1b:df:e0:e6:f3:67:5b:16:92:d9:a8:9f:27:bd:fd:7a:
74:66:64:b4:bb:6c:fc:a0:26:1a:1d:b5:22:ae:2a:32:b7:3e:
cc:28:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client