Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: 1jrEJohpjK6qfYia4HbOpj+JXRX7CEWxpjG6w+nEDm8=
Subject key identifier: FA:65:75:1F:9E:27:8D:11:97:36:1C:4C:C4:25:AC:7F:43:3A:BC:40
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 0194BC72F9E6203A5EB7AEF5D499F05FA8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 4ILvo6vCDj985eseCLehs-ym3Oc.roa (hash: c0boeQmjbbcqipQjA8ZQV3SqlXHr319tM1iaSTDQg/Q=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: h4hkOLzmqolADmnrKlVklGE8TVs8NzF5VGAZdZaYfqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:e6:20:3a:5e:b7:ae:f5:d4:99:f0:5f:a8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=fa65751f9e278d1197361c4cc425ac7f433abc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:14:67:90:b2:cd:53:ec:4f:16:01:23:fb:
4b:c4:29:9a:13:27:1f:80:74:6f:5d:00:a9:2b:1c:
46:59:e1:35:fe:c7:dd:6d:da:81:e5:04:89:42:af:
5e:bf:2f:40:c2:6f:f7:e8:d0:ef:4e:fc:87:5c:7b:
af:b4:37:58:5f:09:20:8c:5e:6d:b1:fb:36:ab:4a:
1e:29:ab:06:be:a6:9f:50:b5:1b:ad:b7:f4:cd:ab:
1e:2a:45:ba:73:f5:6f:26:78:ce:31:3d:c8:68:1e:
4e:bf:3a:fd:6a:15:91:60:e1:49:e9:fe:ae:3f:93:
23:54:57:10:24:bd:db:af:4e:6f:7b:0c:ef:2c:7b:
45:6b:f8:14:06:2e:60:4f:5b:95:16:b7:9f:20:70:
cd:70:b1:a4:57:3e:81:d4:ee:f3:79:0e:d1:1b:9c:
0c:60:8c:2c:b7:19:13:6f:da:b4:19:11:c5:ea:d8:
c5:ec:25:58:a5:77:51:5c:7f:85:67:a8:c4:f0:a5:
39:03:57:d1:c0:f9:81:7e:06:39:03:a7:c4:b6:a0:
c7:6e:3d:1e:9f:a6:ff:e0:48:bd:53:03:99:d8:f9:
f6:9b:cb:33:09:c3:d3:10:70:5c:d7:e5:1d:5c:6b:
ad:3c:1d:4e:b3:aa:c7:2b:2f:de:b0:a3:5d:e4:62:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:75:1F:9E:27:8D:11:97:36:1C:4C:C4:25:AC:7F:43:3A:BC:40
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:b9:39:8e:9f:73:f3:f7:de:34:44:cf:89:9e:72:d2:10:
a4:92:41:ac:8b:86:73:6d:33:80:60:b7:f1:ad:d0:b7:fd:d8:
25:c8:06:02:ca:e2:52:fe:df:66:69:ac:64:75:bf:bf:d9:0a:
5f:fd:52:e5:7a:7e:1b:e0:53:0e:ec:8e:0b:ee:a4:ed:7c:8b:
c0:37:64:e4:c4:60:de:30:bf:ea:e1:39:63:27:72:37:0b:8b:
54:41:f7:a7:42:9b:a6:ef:d8:62:ed:5e:87:96:bb:2e:ca:b7:
39:f6:51:9f:49:d7:26:bf:c4:38:c0:b0:d6:24:d7:95:c0:e2:
98:14:6c:bf:3f:22:cb:1b:93:eb:b5:ad:56:a6:dd:cb:4a:2a:
bc:d9:28:57:99:2c:32:6c:a1:ee:2e:4c:b5:60:13:70:54:15:
ec:8c:5c:ec:79:f6:ce:85:5b:b2:01:68:18:0a:f0:85:4f:34:
d5:e2:f3:b5:f1:e9:9e:3b:80:ae:b2:69:c9:fe:45:9c:60:ae:
0e:c3:b7:ba:d6:12:27:7c:0f:f7:a8:02:16:85:07:6f:38:30:
25:00:bd:5d:b7:a0:dd:01:42:f2:75:2b:78:da:5d:03:fe:9d:
b1:7a:1d:68:98:4a:51:09:74:f5:31:ba:69:b3:79:26:02:08:
69:4e:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:20 2025 by rpki-client