Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: uXoQ4WPp9nTybRVQJcd51mmMgYX1PGum3XIMJffET50=
Subject key identifier: 17:0B:7C:C1:56:4B:46:90:58:27:75:B4:06:7E:7F:FE:B3:90:18:5A
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 0194BD4E449536E70B55636DED68876D7611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: WnfX0vSaAvWnqdO6aawOjHMfP3zInk4qJHaKMzhmzUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:44:95:36:e7:0b:55:63:6d:ed:68:87:6d:76:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=170b7cc1564b4690582775b4067e7ffeb390185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:4d:3a:37:88:ae:08:14:52:a1:e8:99:fc:
ff:da:98:83:ab:85:35:5b:94:98:0c:a5:44:52:16:
66:3e:4f:3b:8a:eb:cb:05:10:51:e7:6d:c1:d1:7c:
c2:17:be:56:20:e6:7b:44:d1:64:0d:9f:d8:15:d5:
b7:b4:5f:0a:71:65:8b:3c:37:7f:02:1e:da:4c:fe:
7d:f9:34:d0:4e:33:1c:81:20:01:2a:48:ed:61:e7:
98:f5:74:fb:42:f2:e4:73:a3:86:a6:88:8a:e2:eb:
b7:32:56:c1:4c:c3:57:8d:3f:af:56:18:f6:ee:35:
4d:9d:7e:b1:bc:12:d2:8f:d3:ae:ac:a9:4e:4f:25:
ee:ff:6d:ba:e7:aa:8c:56:4d:7e:91:c7:f3:b2:df:
cf:23:6e:b0:0f:f8:20:af:f4:1f:44:d8:56:53:a1:
01:f8:71:2e:96:32:e1:45:27:ad:1c:3a:25:ea:5e:
ef:26:43:29:47:5e:31:75:fc:e6:b2:38:3f:fb:bd:
e6:b8:f4:ea:f5:97:f2:57:a7:02:61:e7:55:36:34:
c1:13:4f:5f:af:4e:5f:1d:95:85:72:60:60:6b:b7:
8d:10:51:d9:21:24:c9:1b:c3:44:f6:82:8d:c7:07:
ea:4b:04:c7:19:a0:e8:e9:85:bd:07:dd:06:f7:09:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:7C:C1:56:4B:46:90:58:27:75:B4:06:7E:7F:FE:B3:90:18:5A
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:70:78:1f:58:47:80:2d:ff:00:c8:6b:45:ab:9c:df:43:25:
14:43:53:3a:bf:2d:d1:98:0e:96:47:9f:0f:f4:b9:ab:61:14:
19:32:73:f8:0d:7d:8d:8a:ce:c3:a5:4a:15:29:20:58:68:18:
e9:c2:04:11:73:6f:fd:8d:65:69:12:8c:1a:81:70:01:30:67:
1b:b1:af:5a:57:84:7c:ff:d0:54:d7:20:5f:04:89:a5:22:ca:
8a:b1:7f:92:68:20:07:7e:80:aa:b8:34:4e:4f:5e:18:b3:0a:
49:47:7f:fe:5d:f9:bb:e6:74:18:24:90:51:f0:81:b1:c4:b3:
74:3e:b9:cd:4c:5f:0d:13:5b:b5:2b:4f:c0:bf:cc:e0:4b:97:
33:35:bc:c8:cb:6b:61:d2:7e:cd:7a:1b:d0:c0:e2:ac:dc:a7:
f4:78:a4:64:8b:02:7d:29:69:8b:2e:df:b2:c2:2e:9f:f9:f3:
46:b8:d4:41:95:f3:de:89:75:ab:81:37:e5:74:7c:a8:db:6e:
f7:5b:26:ae:4a:ae:58:30:1c:77:36:9b:62:8a:e0:e1:72:18:
92:08:b2:40:2e:e4:18:16:db:e9:bc:86:1b:d6:b0:f0:26:96:
32:24:74:50:b8:b5:0d:77:18:71:b7:66:40:a3:6b:7a:5a:6f:
7c:e1:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:50 2025 by rpki-client