Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: /VYiWbdK3ODC1HboX3EzJwQ8XV7V4gZDES12TgyBshg=
Subject key identifier: CC:CB:4D:1E:ED:69:5B:41:20:95:33:10:3A:47:AF:E8:97:5B:A4:29
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0194BCE0C55EE237494CE92EE52DEBAB059A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0BBB
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: q4W/2jjqmgZhuwAmtauHynQpFQGqu0HByLbpy2h23Y8=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:5e:e2:37:49:4c:e9:2e:e5:2d:eb:ab:05:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=cccb4d1eed695b41209533103a47afe8975ba429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e8:2b:21:18:a9:b2:57:cb:c3:69:6e:44:01:
60:9d:b0:ec:f2:85:73:65:cc:05:a2:9d:bb:cb:76:
c2:0c:58:42:bc:17:c5:c0:53:51:3c:4b:c0:1b:55:
1b:35:ac:e7:19:0f:7a:fc:0f:d4:55:15:b5:d7:69:
89:19:ae:5f:46:37:6b:27:fc:82:be:90:6f:23:ef:
64:0b:82:ed:73:0c:a4:07:cf:55:72:d9:d9:61:31:
bc:58:1c:c6:2f:ec:b1:c5:35:bb:c7:04:7b:56:f5:
2b:e2:e6:2a:af:03:78:09:ed:f7:87:f6:1b:7e:4e:
45:b4:16:82:85:12:e7:17:6b:80:d9:fd:b5:97:e1:
5d:d0:48:b0:80:9d:b0:02:14:09:07:4b:a1:82:7b:
8b:aa:7f:a7:28:aa:3a:a5:43:1c:c9:06:3e:e5:d2:
b4:f2:0d:c2:d8:ce:c2:5a:3b:9a:2b:45:aa:ec:82:
72:e5:c6:9b:d8:ba:79:db:40:66:f9:70:b8:30:a1:
fc:64:b5:2a:4a:81:36:19:4f:96:cd:28:a9:78:d6:
6c:c5:da:be:0d:17:d4:96:5b:02:32:64:b9:6d:f8:
cf:46:02:b8:b9:4e:34:12:c8:27:a1:67:b1:d3:0b:
b5:a7:37:bf:fa:e7:12:ba:aa:02:ce:d2:37:da:94:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:4D:1E:ED:69:5B:41:20:95:33:10:3A:47:AF:E8:97:5B:A4:29
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ac:6a:f1:13:ef:c5:73:0a:c4:91:a0:bd:b5:64:53:23:de:
c0:af:6c:b0:ca:d0:05:9d:61:a6:48:e2:8c:58:16:40:47:69:
a9:75:3f:5c:04:b0:2e:58:39:73:56:a4:fb:41:c3:e5:7f:99:
38:e3:c0:d4:02:82:3b:e6:6b:64:7c:13:6c:72:4a:d7:46:a7:
89:59:a6:c2:af:f4:ac:45:4f:06:82:8f:4d:ef:1d:46:45:ae:
dc:4c:68:eb:20:cf:9f:92:77:fb:ab:2f:69:60:2d:83:72:b5:
97:b4:c8:a8:70:70:20:16:dd:35:eb:a9:12:b5:3e:76:63:7b:
5e:1e:8a:60:6a:c2:03:10:e8:47:0d:ec:d2:c6:76:95:d6:56:
06:cf:63:0a:f1:b4:01:a6:ba:1d:d1:8b:82:69:bc:91:e3:a3:
06:3b:e9:c1:37:9d:e0:83:4d:3e:09:66:72:2c:52:27:73:a1:
75:75:e0:09:f8:1f:26:86:13:ae:fc:66:53:fb:7f:65:5f:5c:
6e:69:c4:24:2e:3a:e9:14:4f:61:63:2d:3b:4b:12:52:69:3e:
5f:ea:9a:04:5f:58:3a:e3:4c:6c:f9:50:47:63:aa:7b:2b:cb:
5b:3a:d7:e1:05:2d:7d:ff:74:e9:d3:f4:70:c5:28:e5:78:74:
ef:5b:5a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:39 2025 by rpki-client