Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: 4wBHryC+Ghw90D828DouKNyHRoW4QHrECG/FC9GmXLc=
Subject key identifier: 75:88:77:C2:07:1E:51:1A:1A:77:49:25:F3:64:4D:DC:9C:C8:BB:43
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 0194BC72FCD6CE5425E638B6B9B3335A4CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 131B
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: +Kb6WmdewcLN8YJPgusLU/YaIN+qhZ5YOXv08ye9jCc=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:d6:ce:54:25:e6:38:b6:b9:b3:33:5a:4c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=758877c2071e511a1a774925f3644ddc9cc8bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:50:22:40:53:88:c8:04:0d:8c:2b:d6:7a:
96:0a:c1:2f:58:05:c8:79:5f:3a:46:aa:45:ba:7c:
b1:6f:df:5b:a9:96:a1:21:c7:b3:a5:c8:75:13:57:
87:58:06:8d:bc:18:ea:eb:61:ab:81:cb:7c:b3:db:
e2:33:5c:6c:a2:fb:14:f4:d4:3e:88:be:12:59:32:
bf:22:43:e0:42:4b:4e:bf:20:c0:5c:42:22:92:14:
e5:ac:d7:c7:4e:4f:88:ec:f0:33:85:43:f1:6a:d6:
07:37:2a:82:3f:7d:12:e4:ff:53:c1:19:7b:44:e4:
80:56:af:8d:eb:1a:c4:4a:4a:80:33:30:1a:db:1d:
2a:eb:18:15:65:61:c9:f1:c7:49:b2:ff:26:96:06:
00:28:5d:1c:1f:86:f4:0e:c2:87:50:64:f6:b1:3a:
82:90:8e:d7:d1:31:eb:de:13:54:b3:29:9b:b9:87:
9c:60:65:f6:7d:49:c4:01:01:3f:44:52:38:36:92:
6e:40:b8:62:78:fa:1f:06:80:4a:ae:0f:ce:1d:72:
31:62:dc:b6:6e:d8:3e:63:a0:78:ac:12:cb:87:46:
02:81:f7:24:54:03:74:b6:6c:ff:ad:ad:56:b4:99:
de:09:99:83:5c:39:49:ff:15:23:36:3f:94:ca:5b:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:88:77:C2:07:1E:51:1A:1A:77:49:25:F3:64:4D:DC:9C:C8:BB:43
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:47:b0:6a:89:98:3d:38:52:51:d4:a3:e1:a2:50:7a:18:
49:fe:c6:4f:26:63:92:f1:72:2e:c2:d0:9b:a9:b0:da:c8:59:
72:a1:63:28:66:b5:12:3d:c1:2b:27:f5:3c:d8:d7:14:da:e5:
75:5e:67:9e:5c:70:10:be:ae:d3:74:4d:5f:cb:ca:c5:bf:e1:
6d:74:48:c9:db:e8:33:27:0e:da:44:f8:50:96:50:2d:51:eb:
75:41:97:5f:fc:41:f1:61:a2:7b:79:01:f0:3a:2e:13:19:4a:
19:dd:33:a8:83:15:0c:91:54:66:01:3b:9e:2f:44:5a:dc:6a:
28:9f:94:89:d2:a5:93:50:1d:42:07:12:a8:9f:7d:c9:8a:e6:
f2:38:c4:b8:e3:52:d9:4a:8d:43:87:be:7a:e6:91:8c:3b:51:
90:6f:94:09:b6:ad:41:ee:60:50:dc:a7:09:f7:36:8d:f0:6f:
63:fd:62:89:cc:cc:76:a7:f2:cc:70:a3:b7:80:f6:26:2f:80:
84:7a:73:62:c8:e7:3a:15:06:11:87:8c:2d:dc:5e:80:f3:08:
d2:52:ab:09:68:d1:88:67:a9:3c:4a:d3:a4:1c:37:ae:ea:1c:
a8:da:56:0c:50:62:02:92:18:be:77:ff:8c:4b:70:c4:7d:cd:
8f:bc:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client