Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: zcTxtMNWYxrEUpTa2PQXg7oDEgwCsau8bkXgNaPckxE=
Subject key identifier: 30:1C:BE:0D:F4:5B:28:D0:D5:BD:FB:16:BC:C6:C4:F5:27:74:C4:09
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 0194BBCDF5044BAA934411A8BDD206BE23C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 043E
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: ZcCtay47Uy6KSOyu0GfZpSrblU1hVZW38/0ayoPkY1Y=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:04:4b:aa:93:44:11:a8:bd:d2:06:be:23:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=301cbe0df45b28d0d5bdfb16bcc6c4f52774c409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:bc:b2:59:1a:67:0f:cd:f6:5a:ec:5e:90:
43:9a:7d:2c:ab:16:9a:de:e0:e7:a3:2c:12:2a:e0:
f8:36:12:89:8f:13:be:22:75:3d:88:8c:ab:95:ae:
d7:3b:97:d6:30:8b:00:84:5f:aa:ae:e4:e3:3f:db:
b2:e0:4b:90:94:63:bd:71:02:1e:d0:2e:60:5a:f7:
0c:38:7f:e9:29:77:13:70:07:c8:34:9d:1d:06:c6:
f0:65:bd:9f:d6:6e:10:a9:a8:c5:21:24:bc:37:42:
d0:0f:ea:0c:65:ef:d1:96:e5:75:17:5c:2a:7f:e7:
72:cc:67:c2:7f:08:79:c7:5b:05:cf:a2:8f:06:85:
5b:d1:c9:9e:f2:4e:44:61:1f:32:ed:74:9d:a7:08:
12:f6:99:a1:85:e0:23:84:97:36:66:d6:8e:82:1d:
9f:6a:01:55:b0:a7:0d:47:a5:99:da:b2:71:62:37:
59:fd:ed:9e:07:92:ee:c0:8b:88:5f:9f:9b:d9:ad:
0e:fe:5d:32:a2:6f:63:f3:53:a9:ad:96:7c:82:85:
55:af:ac:9f:30:a2:10:33:07:46:78:b4:d5:3c:46:
2e:3e:a1:19:25:56:34:ac:62:b9:e4:51:4e:bf:85:
4f:38:c9:ab:f1:67:f1:b4:a3:73:98:b4:0a:e3:b1:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:BE:0D:F4:5B:28:D0:D5:BD:FB:16:BC:C6:C4:F5:27:74:C4:09
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:82:d4:6c:e5:8b:94:6d:2d:db:e3:06:1e:00:7c:c5:e5:
7b:29:d1:18:36:17:2f:6b:ea:8e:4d:02:92:7a:75:8c:99:61:
37:26:18:a9:b0:e5:00:64:50:a4:f3:bb:bb:db:51:99:31:dc:
68:17:94:57:fa:f7:8e:8b:97:2f:7a:d4:a0:c3:19:69:00:68:
b6:f8:3f:2e:29:3c:48:19:f3:ee:28:f5:57:91:de:0c:b8:d0:
c4:fd:d0:41:5f:9b:f9:33:99:73:7e:57:7d:5c:2d:b0:de:4f:
ae:99:44:d2:ba:50:93:a2:9a:7d:16:ac:c3:28:ba:61:05:17:
de:09:32:f2:17:d8:f3:cd:44:c9:42:f4:57:c4:a2:f3:f3:f9:
29:e0:3d:9b:0f:c8:e9:e8:ad:f1:37:0f:4b:b1:56:c1:7f:1e:
bf:29:1b:1f:ac:35:56:52:88:7c:05:8e:b1:2e:ef:23:5a:1c:
70:c3:e9:96:ac:3d:57:89:c9:d3:1b:70:52:0a:1c:50:d3:92:
48:58:8d:bd:8f:a0:dd:7b:b4:0e:85:03:b5:a8:96:0d:c8:9e:
89:70:02:13:ae:81:c3:21:70:b8:a5:23:e1:f5:01:38:e1:3c:
48:ea:cd:72:2c:b4:11:7d:27:34:42:00:d2:15:33:85:a7:5f:
2b:72:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client