Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: L+bTMqpTOryul/TTMShgZgW0dvR1aNEVrLbk0SqgwLs=
Subject key identifier: E7:14:6E:76:55:91:EF:26:33:5D:FA:FD:1F:56:6F:A0:79:4C:FF:1C
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 0194BC3C58049958D86592F598F41E55ADB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: ZV26l8GVpNtPRdT7PW1CFsMYbAekK0z4MRs3gWaa0wA=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:04:99:58:d8:65:92:f5:98:f4:1e:55:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=e7146e765591ef26335dfafd1f566fa0794cff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:97:93:eb:5c:2d:3c:f8:72:54:68:28:23:
74:e6:d4:31:65:c6:b0:d0:e6:7d:ab:24:e3:fb:b5:
87:0d:4d:c9:b9:97:07:13:83:f1:b7:b0:11:c7:be:
e0:7b:ba:67:1b:f6:86:51:25:a3:6f:c1:e4:72:af:
e4:9c:92:81:fe:1a:33:18:41:87:4c:90:61:b3:77:
0f:90:ec:2b:1f:4c:6f:f8:f0:d9:c3:82:20:48:92:
d5:bc:71:1d:f9:2f:c9:11:32:ce:97:8d:63:f2:55:
e7:46:40:b5:7f:ac:ed:56:ce:17:8d:3d:32:ec:9d:
45:91:b8:01:78:e9:ac:e7:d2:2b:ec:33:51:1e:0a:
2c:04:e2:2f:04:86:70:92:c9:30:de:63:a9:a6:7e:
50:1d:a9:16:87:a5:d3:17:9b:f2:38:13:7d:ee:b1:
d3:91:bb:20:40:f7:56:f4:dd:1b:c3:9e:ce:33:4d:
19:ad:9b:a5:54:27:bc:1d:6b:4e:58:8c:c8:65:84:
88:11:2a:80:db:d4:b9:25:59:c3:7e:f8:a9:c4:2b:
ba:9a:99:2a:7b:89:81:75:a6:d1:9d:34:4e:8e:86:
e0:e6:8c:54:4c:19:c1:ae:21:72:05:6a:d6:a5:ea:
7b:b5:97:43:d4:54:d3:12:bb:77:98:67:12:88:c2:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:14:6E:76:55:91:EF:26:33:5D:FA:FD:1F:56:6F:A0:79:4C:FF:1C
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:93:17:51:c3:17:db:96:a5:56:dc:c2:91:26:b5:13:31:
f7:97:60:2f:ce:ab:1e:5b:25:49:b2:7e:20:82:9a:30:18:e2:
48:6c:78:62:ea:60:62:e0:9b:4c:91:c1:8d:6b:93:8c:94:bd:
d7:15:d5:42:1f:9e:76:cc:27:4a:99:8d:0a:e3:69:20:c3:e1:
ad:94:37:08:44:a7:41:2a:9f:5a:0c:04:74:f2:4b:a4:58:c6:
64:10:7f:bf:08:8f:bd:2d:de:48:8e:92:41:5e:d6:6f:07:5b:
0e:3d:76:63:09:02:7e:e8:d6:f4:22:26:7b:47:80:79:9e:53:
74:f6:c2:31:e6:aa:02:d5:60:d0:2c:59:1c:b1:c2:18:7c:b7:
81:32:e7:1b:e6:69:4e:36:f9:66:5b:9c:b4:65:bb:b5:d4:74:
91:c4:33:91:7e:90:81:24:fc:b6:a0:9e:ef:db:d3:09:64:86:
d1:3b:6b:b1:62:35:32:af:23:4f:0a:a2:46:3f:2a:d7:d5:f0:
61:b7:44:4b:40:56:51:4c:e7:7f:56:1a:57:35:ac:6a:df:3e:
bb:43:bd:73:a3:77:7a:9a:1e:ec:89:b3:d5:aa:b8:cc:45:33:
39:04:c1:5c:2e:2a:ae:0e:9d:f4:2f:02:07:f3:17:97:52:3d:
ba:ea:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:55 2025 by rpki-client