Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File: QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier: m3TnirVM7578/YWrjcoHGnJUMymmL4/AeYgREfbJoz8=
Subject key identifier: 4C:B3:03:AF:E4:E8:14:34:14:91:78:96:D0:AA:F2:29:A9:A0:57:BE
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer: /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial: 0194BCA9F6D7472403B4E40038440CED6F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: 5xPrbTpIul/mQOZB5mmi8ubP5CNTQhBQVwY7Tzv6MoE=)
2: j37XoMC3UG0E_oUwTDht88JJrh8.roa (hash: cqy63HfmTCUoUdF/JZjPLrFzuSfjpRSNk0rinu9lqNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f6:d7:47:24:03:b4:e4:00:38:44:0c:ed:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6e640198013de12a251f086030cd78c732516
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=4cb303afe4e8143414917896d0aaf229a9a057be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:c1:92:eb:82:dc:bb:84:10:f1:8f:83:72:
76:e1:3f:c7:0b:85:65:b5:ce:65:cb:db:ba:57:1a:
83:09:2a:45:af:3e:95:7c:cb:07:39:c4:2c:de:9e:
1c:8a:85:3b:85:52:48:80:c1:47:9b:62:b8:ce:05:
02:79:42:a9:d5:a1:6b:dc:cb:2a:10:74:8d:10:73:
00:c1:87:98:73:36:09:aa:99:67:78:c3:22:19:06:
1a:32:8d:79:a0:b2:7c:d8:1e:69:aa:68:52:98:20:
2d:f0:29:9c:48:31:16:08:23:6d:e5:f3:63:6d:ab:
2d:9a:fd:a2:da:a3:1e:7f:57:60:1e:25:5e:ef:92:
1b:09:1b:8c:49:95:4d:2a:5a:9f:82:d1:c6:ac:30:
c4:7d:26:bb:af:98:12:40:f0:5f:2a:da:2e:e6:a1:
e0:ab:4e:fe:3d:b7:97:62:d8:96:5d:7d:fb:34:e8:
93:33:57:0e:9d:c5:b6:57:9f:85:4b:34:ec:2b:75:
7e:58:04:40:ed:78:5f:34:17:5a:71:b9:6e:3c:1e:
c6:51:90:49:3d:eb:42:71:0a:5c:53:e1:21:ef:c4:
ac:16:62:b7:d0:b4:d1:df:62:7b:82:37:fb:03:78:
c5:b0:a0:9c:e2:1d:e7:b3:35:9f:cb:68:ef:87:62:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:03:AF:E4:E8:14:34:14:91:78:96:D0:AA:F2:29:A9:A0:57:BE
X509v3 Authority Key Identifier:
keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9c:36:a4:4e:73:4b:84:96:aa:55:c9:58:e9:a8:13:ac:88:
92:3a:0d:68:88:4d:37:c2:fa:ea:0f:91:46:dd:c0:97:48:71:
a6:b6:d9:3b:54:6e:88:39:20:3c:c2:03:20:a9:53:15:71:aa:
a1:b6:72:a7:02:76:91:0b:33:a3:16:38:42:bc:83:ef:7d:84:
de:db:76:1c:69:b6:e1:85:31:76:83:52:31:5f:d6:55:e3:4a:
03:ee:5a:34:14:17:5d:66:0c:87:36:04:10:d7:a7:83:2f:4c:
37:2d:62:88:e4:73:be:45:7f:f7:1b:fd:27:db:8e:aa:78:5f:
d3:5f:1c:21:15:3b:a8:70:94:34:41:4f:d0:8e:90:fc:4f:4f:
25:f6:ee:66:6f:43:7d:c0:8a:db:31:94:17:54:e7:65:c4:36:
ba:cf:b6:e2:14:56:e8:85:01:70:27:90:e6:53:6e:6f:6c:81:
5e:a2:9b:f2:7c:00:76:c0:88:ba:5e:50:a9:54:31:de:32:74:
5b:67:f0:5c:65:ab:77:e7:83:1b:ff:d0:e1:46:2a:32:9b:fc:
f2:c1:35:5d:8e:02:75:7a:5f:52:0f:30:4a:7a:4e:a8:6f:c7:
74:75:2b:14:7e:af:c1:41:06:4f:e4:aa:4f:80:35:67:65:a3:
f6:4d:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:32 2025 by rpki-client