Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: uAZAx8/lQb5WFzUsd2ctbXustxCD77RlmoVw1lpWcio=
Subject key identifier: E8:5D:8B:8D:21:11:54:A1:93:FF:3D:B9:C5:43:94:1C:DB:26:BF:7A
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 0194BD4E3BA9CBC86BA925DD618AD2FBE1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 040F
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: zUKsJaxGNab/Zey2v819epZ6PKx02cS1sXC5AhM4OWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:a9:cb:c8:6b:a9:25:dd:61:8a:d2:fb:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=e85d8b8d211154a193ff3db9c543941cdb26bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:5a:e3:be:06:5f:59:83:79:85:0b:f8:57:
16:81:65:27:56:37:ec:c0:45:92:2c:73:a9:48:36:
51:df:b4:bb:73:7f:91:d2:99:b9:92:2c:57:52:8e:
c6:0f:30:93:5f:5e:3d:d0:d1:bc:e3:7f:1a:06:40:
25:71:cd:6c:d0:35:80:56:19:a0:2b:a6:fa:89:c7:
ff:62:df:83:e9:aa:9b:b4:c2:96:cc:ec:6b:aa:d7:
a4:06:0b:a1:6a:a2:5a:5d:b9:27:39:43:31:17:09:
21:c6:87:b4:f6:e0:db:1f:94:3e:bb:8e:18:59:5c:
b0:f0:c1:c2:ae:ec:64:fc:aa:cd:ad:56:50:30:e2:
cd:3e:37:6e:cd:76:17:ee:f3:25:4d:65:f1:1d:0b:
3e:b1:11:36:dd:ad:4b:43:89:77:f1:70:59:73:ab:
90:7e:27:46:3c:43:69:7d:11:7c:a6:bc:c7:3d:26:
0a:89:d4:b1:73:a9:b7:89:94:44:24:0b:1d:8e:b7:
2d:57:fe:8a:96:82:f3:a3:1c:f7:c6:9b:91:6e:0e:
1f:52:76:56:55:59:00:30:f6:f0:52:f0:89:0d:fd:
00:7e:1b:8e:f8:5f:15:c4:af:16:5e:c0:10:9e:08:
29:45:50:c6:48:90:ce:41:83:bf:9b:cd:54:f0:74:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5D:8B:8D:21:11:54:A1:93:FF:3D:B9:C5:43:94:1C:DB:26:BF:7A
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:17:5c:35:17:c1:ba:7d:dc:92:02:86:88:00:91:f1:e1:0e:
ee:8a:f0:b7:9f:ad:c3:1b:d7:47:6e:f1:8a:4e:d3:fa:51:0a:
3a:a2:09:11:9d:27:b2:00:aa:c0:1e:3a:a2:72:54:14:53:94:
a3:a4:ad:9e:27:5b:3e:39:20:5b:e0:e0:70:23:27:33:b5:54:
06:ad:c6:d7:ce:9b:35:6d:a9:64:fb:f8:01:d4:10:94:6a:17:
f5:82:38:f6:3c:9f:fb:b0:8a:a4:5f:55:48:b7:0a:94:ba:dc:
8c:d3:b4:da:a8:fd:b1:b4:67:45:db:30:b3:42:06:1a:16:3c:
79:37:d6:8d:df:dd:b7:7f:7c:dd:70:5a:1f:bb:4d:4e:ad:d2:
37:33:be:cb:1c:2d:ec:d6:aa:00:a2:04:bb:a8:92:2d:ec:51:
82:93:e2:4c:d8:50:ae:99:ce:1d:c6:2b:5a:72:74:e2:bb:cd:
e0:12:fa:b9:57:8c:66:c7:c3:1d:bc:bb:57:5a:77:89:c2:b1:
ed:03:8e:ad:89:10:27:50:fa:9a:39:02:d9:d4:d9:9d:1b:9b:
e9:bc:af:a9:ca:f4:7c:ff:ea:b7:4d:f1:39:7f:1a:50:b6:9a:
0f:57:a6:c1:b6:69:6c:bb:e4:c7:e4:0a:83:c6:34:ab:0d:3a:
b8:46:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:31 2025 by rpki-client