Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json)
Hash identifier: sTILJar1t1kkt61vTYEPG6xM7cxrXd4v0Wz5OT9X4Jk=
Subject key identifier: FB:C2:02:CC:27:E2:2E:FD:75:A4:27:DA:78:17:A5:56:99:3D:9D:22
Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6
Certificate serial: 0194BBCEA1F64041EF1A12C32361B06EDB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: UzlPtW9NBFcdy+BZlH5yINvjxaN/S9HPE0odAStio+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a1:f6:40:41:ef:1a:12:c3:23:61:b0:6e:db:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=fbc202cc27e22efd75a427da7817a556993d9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:54:fa:15:0d:4b:68:01:c1:c1:54:16:4c:
17:53:b9:d7:35:d6:5c:50:c5:4c:8b:3a:86:05:13:
8c:64:02:60:02:2b:ee:8d:a7:f3:4f:cb:13:b9:19:
9b:94:40:a3:91:02:22:b5:ef:b2:6c:de:d4:8f:84:
d6:90:45:5f:42:aa:5a:52:bc:a4:06:f6:1b:c2:5f:
88:36:ae:b2:43:76:7d:cf:23:0b:ea:fd:01:9d:56:
37:d3:6f:01:19:74:25:b6:60:0a:2a:71:63:47:c8:
1c:43:25:b3:2c:7d:66:92:40:d2:22:e5:3c:b9:c2:
26:3a:dd:79:22:44:2a:48:89:12:bf:89:42:03:23:
e5:ae:f8:56:cf:18:83:96:af:69:cf:3e:b0:dd:54:
b0:04:92:05:69:8a:4f:dd:21:53:44:2e:84:0c:82:
77:71:0f:56:a6:ab:be:6c:24:46:c0:e1:33:2e:53:
46:f9:a4:60:4f:4c:ce:c1:67:6b:ed:c5:1e:bc:57:
db:76:14:55:7a:f1:f6:c7:99:0c:84:1f:a6:54:73:
d0:74:65:ae:a6:2d:c2:96:bf:fa:d1:26:c1:f0:66:
ac:b7:33:b6:1d:c4:34:c6:03:5f:c0:96:58:91:d3:
20:6e:77:7e:5e:b1:e2:f3:53:f6:21:78:82:21:3a:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:02:CC:27:E2:2E:FD:75:A4:27:DA:78:17:A5:56:99:3D:9D:22
X509v3 Authority Key Identifier:
keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:62:43:19:64:5d:8b:47:2c:01:e7:6e:04:a5:f4:a5:03:17:
01:1c:95:27:0b:54:dd:f9:ca:79:19:00:20:0d:1f:a1:d5:ee:
48:7b:90:13:2b:ac:e6:b8:77:bf:4d:a5:e4:66:ef:74:02:10:
63:40:fd:0c:3a:c2:33:d2:ad:49:8d:1c:39:40:a3:3b:3b:9c:
a4:ca:1f:0f:1c:2c:5f:51:9c:74:dd:fb:ea:75:f3:e4:9b:a8:
8d:2d:db:52:47:b4:0b:b6:03:96:f1:62:a4:cd:d9:0e:69:58:
f8:3b:ce:84:69:cd:54:ac:ca:42:ca:fa:ac:e1:bb:d3:d9:08:
ee:dd:1a:59:03:34:71:b0:7c:21:28:b4:d1:63:21:f8:c5:1b:
51:88:0a:2b:c0:a7:1f:51:48:ce:0d:ae:cb:45:2c:68:59:ec:
19:11:5e:46:6c:0e:ea:41:8e:66:0d:58:ca:56:6f:94:54:8d:
ca:27:7e:d8:5a:2b:cc:17:71:14:1f:70:07:7e:97:a6:9e:42:
41:15:35:8a:ae:79:f2:80:ac:06:53:83:6c:c1:4f:ae:06:47:
71:33:93:c7:92:7f:b2:2b:a2:4e:dc:d4:75:c2:b9:56:86:aa:
38:40:09:63:62:89:db:33:d2:ac:84:62:18:fa:8a:3f:cf:46:
f2:fa:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:48 2025 by rpki-client