Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: LO8AhCRR2JoEi6VUutneQ6IkTvZ84iKwZ20p2xwTz3o=
Subject key identifier: CA:5C:F8:BD:E3:64:13:FA:B2:E3:BA:42:FD:79:DB:E9:68:27:BA:D4
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 0194BD85A941A2688E948245FD80B423FBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 0316
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: gWFdQoYYkcOpB3cMXFFwPCTkAzY24Ij8AG22PlJSTHU=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a9:41:a2:68:8e:94:82:45:fd:80:b4:23:fb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=ca5cf8bde36413fab2e3ba42fd79dbe96827bad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:93:a3:72:9f:dd:40:57:1a:65:59:50:0f:
27:04:5e:87:64:c1:45:fe:94:4d:77:1f:13:7e:0e:
de:1c:dc:c4:a4:2e:7b:d6:63:8a:84:32:7a:09:f6:
91:c2:af:4b:93:f6:71:8f:f3:c4:29:82:25:6d:b7:
7b:ab:c9:3d:70:bd:b9:d0:45:e6:4e:cc:dc:9a:43:
03:53:00:1a:76:71:dc:7c:26:b5:ab:66:a4:f2:99:
67:85:16:f1:f1:77:89:86:40:7c:19:86:b3:da:b4:
11:a9:ec:3f:3d:e2:41:f8:55:c1:34:2f:86:53:01:
24:5e:97:e5:e2:1a:a6:12:46:5b:c1:14:51:1e:79:
cc:f3:64:5b:07:b4:9d:42:b3:ed:75:dc:08:fc:a7:
bf:90:e8:e3:f7:b0:06:b1:fc:c4:8b:11:77:7b:46:
5b:a3:2a:4a:26:73:46:13:88:21:45:26:89:ac:65:
2f:1f:dc:f7:1f:94:97:d3:e3:5c:a6:2a:12:6e:88:
58:82:16:db:d4:00:4e:5d:99:df:56:a8:6e:67:10:
d6:fe:da:c6:d1:f0:ce:64:e8:0a:49:4f:79:e9:22:
2c:c9:77:a1:e4:3d:13:8e:d6:e2:a6:3f:68:38:d5:
ed:1a:99:30:32:24:bb:18:db:5f:fa:cf:29:fd:72:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:F8:BD:E3:64:13:FA:B2:E3:BA:42:FD:79:DB:E9:68:27:BA:D4
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8c:f5:55:5d:a8:d7:5c:b4:bb:db:e2:4c:01:e1:2c:f2:3a:
06:e5:5a:83:29:c9:90:71:72:69:72:a5:d0:8b:0e:7d:82:cb:
1a:72:e2:be:d4:72:d0:16:c4:ef:e4:ef:74:8d:24:33:f3:7f:
59:21:7d:d1:6a:29:63:b0:56:82:a9:ff:47:5a:88:f3:eb:dd:
7a:05:e9:75:b8:d6:e9:4e:3b:09:0e:34:64:1d:b8:56:d1:9e:
95:b5:69:f3:38:5e:aa:9f:16:a5:28:23:71:0a:61:d8:b6:35:
d3:59:3d:19:70:60:27:6e:ec:5c:a2:49:09:0d:1d:d7:8b:82:
0a:2b:96:a2:cf:38:93:f1:5b:ff:42:0b:9a:90:89:30:a6:6d:
4c:e2:90:7d:59:1d:44:55:00:ca:f4:33:97:21:1b:85:12:0f:
89:25:43:cb:e6:ee:be:ed:43:bf:c8:49:e7:8d:18:c5:85:32:
81:9c:13:3c:e8:81:f6:71:ee:51:01:d5:0f:7e:73:78:65:4c:
6f:2b:0e:cf:d8:eb:cd:17:25:71:f0:1e:ea:c8:38:6d:4c:21:
3d:a0:fd:df:8a:ab:44:ab:2d:a0:ef:05:c9:91:d6:18:e4:55:
60:7f:3a:7b:5a:12:e5:6f:98:1d:e9:80:9f:8a:e2:1a:63:05:
47:49:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:03 2025 by rpki-client