Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: iJaOJnQtcCSjTBueVE2GdjoaJZdIYHEDq1Mcd1P1bCU=
Subject key identifier: 7B:F8:F8:4F:59:91:76:FD:8B:7F:64:C4:DC:D8:AE:D5:B7:E4:45:85
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 0194BD4EA3BFCF7125AE56C6E2E05F7E4EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0A01
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: SwEtBwrL9+Fpe0dSP6sHVOfTz9fDgJxivxrE31tvfes=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a3:bf:cf:71:25:ae:56:c6:e2:e0:5f:7e:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=7bf8f84f599176fd8b7f64c4dcd8aed5b7e44585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:3e:5b:a7:05:c1:6b:5d:4c:41:cf:91:c5:
6c:c7:95:ce:37:32:9c:da:86:50:b6:67:e8:52:d8:
30:a1:08:e1:f1:4e:a6:e4:4a:4e:36:1c:aa:42:21:
5b:89:0f:a3:1f:ea:8f:61:c0:de:7d:22:d3:84:f5:
0e:d9:d2:ed:be:c7:50:9f:eb:b6:de:b4:1f:c6:53:
aa:a3:44:6c:fd:6b:6d:01:38:a2:63:fa:9d:2f:99:
84:e9:29:32:5f:8f:5d:43:82:62:56:7d:ce:98:d6:
c1:5f:75:22:3d:b9:f7:fd:62:b6:65:80:d6:98:d6:
e0:99:44:dc:27:af:12:b0:2e:b1:87:34:b8:94:33:
a1:77:1c:54:e1:6e:45:b9:85:cd:8b:23:37:c4:bc:
40:aa:08:b3:d0:f2:77:a2:11:b6:23:d6:a7:33:90:
3b:18:39:97:53:b3:69:ab:19:c4:34:97:12:89:3c:
f4:51:08:89:6e:9d:33:94:e9:c2:d0:78:1d:35:86:
9a:a9:63:58:62:aa:36:8a:73:63:fb:1b:99:3f:aa:
c6:0f:80:ca:fb:3d:59:f1:af:6d:92:8a:4e:b1:29:
dc:83:c0:3a:73:86:d6:7e:18:ac:38:00:84:59:b1:
60:f9:89:cf:e2:88:f5:be:1b:40:5a:a0:c5:32:93:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:F8:4F:59:91:76:FD:8B:7F:64:C4:DC:D8:AE:D5:B7:E4:45:85
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:91:fa:df:5b:ce:83:38:1f:3a:52:11:e9:23:54:85:98:
fa:bf:9b:ad:b1:ee:30:0d:9b:6d:d5:a2:29:12:fb:e2:7f:a9:
c8:fd:9c:1c:ec:50:01:72:e0:63:a9:b9:8b:02:4e:6f:5f:4c:
93:62:9c:21:3c:8c:a8:6b:c5:50:7c:a6:32:72:60:38:c2:93:
1f:ea:92:09:39:a0:c9:46:b2:b1:ed:cd:73:99:e9:13:48:4b:
c2:ea:de:bb:87:94:9f:14:ee:34:0f:34:95:d7:b4:95:72:85:
a4:dd:0c:29:eb:49:bd:4e:8c:32:ea:cc:98:3e:2e:8d:e3:cf:
6c:34:de:5a:0f:1c:00:96:19:0a:7d:b0:28:b5:f4:61:b7:c6:
84:35:01:a7:8f:47:67:53:6a:3d:52:32:3a:96:ff:6b:50:b0:
df:9e:3b:9d:7b:14:6d:93:e3:76:3e:ad:14:0c:b1:5c:6d:0a:
e3:8b:a2:06:91:fe:c2:a4:1b:ed:78:4d:11:38:9b:56:b0:73:
94:b2:02:19:db:d6:ed:57:a1:00:82:56:a1:9a:0f:9a:cc:0a:
e7:f5:0b:10:89:11:b9:b9:8f:d4:67:14:3d:0f:9b:f9:8a:6f:
57:f5:1f:4d:74:f6:fe:65:6e:7d:21:34:e9:b9:29:d6:bb:82:
a8:6c:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:28:35 2025 by rpki-client