Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: +mjXCin+QbQnvekT59lp/RsUBgjTv4knz6ndj2403l8=
Subject key identifier: C9:88:94:9A:63:6D:35:DA:41:84:7C:80:6E:D5:F7:BB:2C:70:7A:E5
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 0194BBCDC4A2B80EE8FAF874FCBF72627CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: 0UiMAD3K1Vd_o1ukey_EamOgfsg.roa (hash: /lgJM2bqi/sUpmdCb7crrQqVayvXqEJ8evDSByU3DJU=)
2: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: aHw0FQSDTxCk7qemsmW7V74vlCAAr7WJDL/V8PxKqhw=)
3: aVnXSxl3A9imF58Ni6PA9o97Lt0.roa (hash: 1b03aGZyiDI4vZq8xAQwMk9wWsMeLl0pjrQrWqhenxw=)
4: misEsljA75nAA5oIsh_k4GVCg4w.roa (hash: p4BzWp3j9j27Wjuz+V0a+txHqIiOhQ+ybn3eqzzf6rU=)
5: ujK7196Gk_c3ddVaz2vNjb1yuKM.roa (hash: oPbTKsm4Ke6sVA27ztN+8OGkGTX5DqK9hqJSWTYFs3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:a2:b8:0e:e8:fa:f8:74:fc:bf:72:62:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=c988949a636d35da41847c806ed5f7bb2c707ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:f9:60:61:06:4b:5b:b8:f7:8d:74:56:3b:
89:63:99:25:82:fe:9a:fd:71:ae:f1:b9:5a:20:cb:
63:73:c8:ad:11:70:2b:3c:e7:fb:8b:f0:23:19:f5:
be:80:8c:46:34:a8:05:90:ac:f7:d2:5e:13:f5:bf:
cf:25:9c:63:8d:09:bc:f1:d1:3f:9f:a1:38:05:5d:
95:c8:18:49:8d:2e:91:b0:83:2d:06:e2:dc:f4:46:
23:53:1d:6d:7a:72:2b:0a:2a:5e:97:7b:bb:8d:86:
29:ec:ef:f3:35:ce:4b:ac:50:45:a1:0a:a3:16:d9:
a7:63:17:45:c5:76:40:bf:f6:3e:dd:e3:72:72:58:
14:e0:c0:44:f3:09:8f:b4:15:c3:59:6f:e2:06:4a:
af:ff:2a:cd:05:36:24:8e:7f:83:da:3d:21:4a:f9:
86:84:b1:09:17:61:61:6b:49:08:46:a2:fb:cb:86:
67:bc:0f:5f:c3:9c:90:21:e3:4d:54:e0:c4:2d:c3:
ee:a0:93:65:ce:cc:e3:c6:54:10:65:c6:20:47:93:
01:6c:83:0f:36:9b:20:67:54:7b:d9:7d:90:76:67:
77:7d:8f:72:59:97:fd:48:44:1f:43:e8:34:11:c5:
0f:0f:fb:01:29:0b:ed:15:14:96:bc:d2:cd:73:ae:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:88:94:9A:63:6D:35:DA:41:84:7C:80:6E:D5:F7:BB:2C:70:7A:E5
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:e2:ce:c0:49:96:c5:c9:b5:89:69:cd:3d:6d:b1:87:5c:
fd:90:70:9d:db:6f:28:7d:a3:b4:bc:dd:af:56:94:b9:15:aa:
f0:90:0e:be:8f:31:08:48:45:26:56:f6:f8:61:5f:1f:78:92:
52:8c:61:4a:b5:14:01:fb:98:35:98:cc:a1:31:38:07:c6:23:
cb:93:18:9a:c6:81:fb:e4:2f:92:86:ee:f6:9b:e4:03:0f:29:
21:97:21:78:39:18:36:19:05:fb:0d:70:9b:7a:54:0f:15:43:
f5:af:e8:f7:44:50:d1:80:73:49:c9:9e:52:e4:6e:2f:74:96:
99:9b:f3:d1:18:3d:e3:6a:7a:58:fb:fc:37:84:73:96:a4:fe:
b9:97:3e:ce:c7:81:38:e5:fc:97:73:0f:7c:00:7c:da:ed:86:
9d:c8:73:3e:5f:95:09:51:71:89:c7:cd:f2:a4:a5:73:4b:c3:
b4:3e:42:36:3a:e8:1c:66:be:6b:0a:fc:9e:76:28:a2:c2:c2:
c4:c5:04:f6:ba:d8:c7:74:05:c0:1f:8b:7c:8b:8b:ff:25:a8:
77:16:20:53:1f:3c:f6:71:57:60:f7:56:40:87:ab:ad:43:8a:
11:65:fc:49:f2:d1:f0:90:b0:df:8c:00:b2:2b:cd:f3:62:54:
5b:41:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client