Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier: hQA1y2/kiyQUi8zoyjhcZ2xjpbrHSTv7UXhVtcPpJYs=
Subject key identifier: F1:EA:BC:26:EE:56:9B:F2:6D:9A:A5:E2:E3:58:87:5B:48:07:9F:61
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial: 0194BC72D470D9F5103F2FB6B736ECE2068C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number: 1178
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: Ff5kdWHwkqUwma9LcN/jtfP8viXIvRpy0jKqwiYhAaI=)
2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d4:70:d9:f5:10:3f:2f:b6:b7:36:ec:e2:06:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=f1eabc26ee569bf26d9aa5e2e358875b48079f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:5b:93:21:53:e4:f4:5c:ef:c7:58:f0:48:
93:07:06:20:0a:7b:4d:cc:fe:c3:82:95:75:ec:f0:
6e:fd:56:19:c7:09:ea:63:b7:2d:37:cc:ca:e7:5b:
9e:21:0f:4c:35:13:39:65:79:4f:65:ae:48:1d:f2:
54:08:2f:e5:af:17:35:54:7e:55:3d:cd:cf:2b:9b:
bf:4b:35:cb:48:37:be:26:30:85:65:14:a0:9c:b9:
ee:63:ff:01:66:9b:9e:ad:d1:6b:6f:7a:0e:9c:c5:
e7:6e:9d:6e:d0:2d:80:8b:d5:fd:e2:c1:c6:d9:88:
fb:8d:26:5b:db:79:33:c6:66:32:5f:55:bb:c3:c0:
7e:00:79:e3:81:9e:c3:30:37:37:dc:6b:cf:c1:0a:
cd:3e:e0:6a:34:3b:c9:66:d1:3a:d4:66:06:66:fd:
f9:83:ab:73:79:ab:f5:79:83:9d:4e:eb:e3:cb:54:
ee:0e:79:2b:4b:54:05:2b:d0:e5:de:0d:cc:2c:5b:
3d:2d:49:84:ac:22:6a:0c:cc:0f:61:13:b2:a0:5f:
a7:e3:12:d8:b1:13:9b:e7:09:53:af:8c:f3:c6:bd:
37:5e:71:6d:91:98:b5:49:6a:7b:e8:37:c3:2a:77:
d5:21:9a:a1:e1:97:b5:cf:f6:42:f7:2c:52:09:ee:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EA:BC:26:EE:56:9B:F2:6D:9A:A5:E2:E3:58:87:5B:48:07:9F:61
X509v3 Authority Key Identifier:
keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:57:e8:af:cc:f8:44:b0:53:27:2d:83:9a:98:f5:6c:e0:f8:
9a:d0:69:4e:09:e4:78:18:2f:35:85:bd:dc:2c:fc:e2:8d:46:
b4:b7:2f:6a:0f:72:0f:41:33:d0:4e:15:a1:26:c8:f1:b7:b8:
6d:f5:92:d4:17:2e:be:12:bc:a6:c5:9c:55:60:1a:62:96:db:
fd:04:ee:b6:07:a6:c2:65:a3:70:5b:cc:d4:d9:17:2c:e0:64:
60:f6:f0:d1:f3:97:65:2b:56:b4:fd:57:5f:30:78:75:aa:cd:
6a:35:c1:60:23:41:31:ac:a0:a3:fb:e5:ef:f5:18:5f:b8:eb:
6d:ed:ad:40:a8:cd:6b:04:5a:33:8d:80:4a:9f:40:e5:0d:84:
37:84:a5:de:97:3c:1e:78:07:a8:89:ae:d4:77:39:9e:8f:60:
69:3c:f2:18:3b:a3:f7:cc:ec:34:13:44:78:db:32:37:6b:0f:
ba:73:7a:ad:07:7d:0f:92:fe:3c:cb:dd:53:25:e4:70:ea:0a:
d4:5a:3f:4f:3f:c2:08:df:d6:71:25:ac:43:e9:f6:12:59:e3:
29:5a:e5:8e:fb:19:9c:d6:c6:cf:de:c9:58:37:5c:9a:06:4f:
9f:18:03:c1:7b:05:29:5b:05:81:4e:1d:db:cf:00:39:b8:ce:
8b:51:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:39 2025 by rpki-client