Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: 8AGu1u3vEOTpx001E0Ye0kdiiMp8sfG4rkNF9QmAZe4=
Subject key identifier: 52:4D:6F:9C:F2:DF:40:C4:AC:EF:40:99:78:4E:8C:5C:44:0F:A4:2F
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 0194BC3C221995BF80A0D8B8CB8D546D59F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: 1+A2VmKmbiYFLQUFzTUOOD6QIiRU69Rg8X9R3g+ZYFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:19:95:bf:80:a0:d8:b8:cb:8d:54:6d:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=524d6f9cf2df40c4acef4099784e8c5c440fa42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:e1:f6:24:c0:3a:16:96:a5:7d:82:26:be:
8f:28:4f:f9:4d:f3:e5:74:0f:b9:aa:5d:bc:d5:2c:
82:85:1c:83:2a:1e:82:8a:b6:aa:b6:a8:1b:fd:0d:
e1:4e:61:38:6c:d9:59:b0:ec:cd:f4:52:51:29:3f:
0a:fd:50:f5:da:61:e5:45:fc:84:d7:55:70:51:52:
f5:b4:57:02:07:64:aa:54:5c:a5:77:f1:0c:c7:21:
1f:fd:57:26:b9:ce:46:40:99:02:4a:07:ef:7e:eb:
b2:44:cf:60:98:4b:99:d6:03:61:4b:cd:42:83:0d:
c6:3e:2e:6b:55:36:a5:1e:d4:55:b6:94:26:9b:ea:
44:dd:98:88:ec:b7:56:26:dd:7d:76:f6:4c:bd:b9:
a5:27:3d:27:2d:8e:bb:91:81:20:7e:30:18:e8:bb:
ad:68:39:9b:01:5f:61:59:c6:bf:b8:58:57:e1:26:
6c:4c:8c:54:7b:77:fc:ef:1c:3d:3a:d1:ee:a8:4e:
fe:17:68:48:8f:2d:0a:1d:fd:67:f4:d2:b0:53:52:
4e:ca:33:b2:86:58:f2:89:e5:11:41:fd:a8:20:3c:
9b:22:9d:eb:9a:c0:c7:24:b9:49:47:52:9c:33:0c:
ce:53:43:1a:99:1a:c3:1d:50:a6:6f:ff:b6:75:9e:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:6F:9C:F2:DF:40:C4:AC:EF:40:99:78:4E:8C:5C:44:0F:A4:2F
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:95:83:1d:86:d2:86:5d:1d:32:8b:d3:ef:86:0b:97:2b:08:
b3:37:43:dd:1a:99:92:4c:d7:26:10:4d:81:31:75:66:a1:e6:
96:cd:93:53:a7:77:c7:47:ef:b9:7e:52:18:53:a6:2e:47:c5:
74:5b:c1:21:ed:44:04:ae:35:8b:39:7d:13:3c:ab:1d:0f:eb:
63:18:42:70:bf:2b:0e:01:3f:d7:d4:df:8e:1a:70:de:12:60:
ed:20:be:29:29:92:72:91:d0:81:7c:69:36:eb:41:1b:47:f7:
a0:4e:8b:cb:b0:ee:10:43:f5:ed:ff:76:f0:46:1f:7d:b7:04:
fa:fe:9f:f6:d2:d1:df:fc:90:a2:57:8e:7b:86:a3:79:03:75:
fa:26:14:15:70:16:62:c9:b3:38:6f:fc:89:8f:d9:15:32:ac:
bb:fa:42:80:cf:46:7d:77:4d:3e:e2:c8:9a:9c:4f:d3:78:d8:
0f:0f:04:37:d7:bc:f8:66:88:97:14:b9:7a:d0:01:de:a3:71:
45:54:1b:0b:d4:93:9b:70:a2:04:34:5d:d9:c8:70:34:3e:61:
51:bc:a7:6a:cb:ea:dc:bb:3f:09:88:25:fb:39:3e:b1:24:f4:
d0:c7:b8:e2:7e:b6:55:9d:6a:fc:a9:72:10:ba:50:86:8f:ab:
dc:44:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:55 2025 by rpki-client