Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: RYksv8lyxtDSdPiuLKDDBZhLqqUrKP8IhO4pq8ueb0g=
Subject key identifier: 59:F4:8B:31:71:84:C4:A7:C9:8B:E5:2E:9C:09:3F:B0:DA:F0:82:48
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 0194BC3C253DDB950B458121E283C85D93C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: PjLFz5FjY4lNs4G5qBBQeWGkIwOd2qnpzfU0I5fidSM=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:25:3d:db:95:0b:45:81:21:e2:83:c8:5d:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=59f48b317184c4a7c98be52e9c093fb0daf08248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:a9:88:c9:dc:3c:be:96:4b:82:f5:79:35:
53:0b:61:3d:ef:28:51:db:4c:5e:76:92:16:16:74:
f0:00:af:85:69:47:d0:aa:8d:12:89:17:6d:97:9d:
25:b1:11:0b:06:fe:e5:da:7f:e6:15:1d:67:ec:a9:
89:9d:91:d0:65:1c:f1:c6:1a:ec:67:be:49:63:89:
51:a6:16:60:68:64:5f:85:4e:2f:ea:8f:0c:52:3d:
16:99:d7:a1:48:66:98:7a:11:7f:36:83:c1:f6:1f:
f1:83:9f:27:1f:a4:ab:73:d7:d3:d2:af:18:07:18:
51:57:37:e2:cd:b1:f7:93:69:89:e9:7e:1e:ae:21:
a9:1d:de:b2:83:18:b3:f5:5c:70:bc:9e:ed:57:92:
1b:33:67:8c:bc:eb:7d:2f:e1:d1:19:4b:d3:5b:73:
89:d7:6f:0d:76:ba:f9:dc:fb:f6:cf:57:3b:ba:86:
5e:04:a6:3f:90:33:d3:ba:62:ca:62:40:eb:81:2e:
48:63:35:26:0c:21:66:3e:65:41:58:fa:93:b7:93:
5e:19:fa:ac:1b:81:be:21:29:7c:55:86:f3:d0:e2:
91:24:50:79:b4:c8:51:58:5a:17:cb:91:d7:ce:1d:
34:b0:8e:07:07:2c:11:a3:32:3d:e1:af:fe:c4:b4:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F4:8B:31:71:84:C4:A7:C9:8B:E5:2E:9C:09:3F:B0:DA:F0:82:48
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e8:71:73:64:6c:f0:b2:b2:b8:88:6b:9f:96:ee:eb:f7:f2:
e5:dd:30:30:dc:f2:26:3b:f3:1e:dd:6e:f0:90:6b:61:1c:b7:
50:d4:2e:07:9e:89:d9:78:ac:63:81:be:b4:02:29:c9:22:41:
54:d3:d7:ab:82:c8:35:2e:c1:46:90:5b:aa:0b:ae:95:f4:4c:
ad:7e:e4:99:f8:00:60:85:e2:86:57:bf:3f:81:e9:76:31:5c:
f4:ae:37:90:90:52:f1:b6:b9:2a:7d:a7:cb:3e:53:8b:0d:11:
b0:29:1a:3a:04:2e:18:ca:86:44:c1:3b:d0:34:bf:50:64:34:
e7:d1:bd:74:f7:9e:c4:c8:7c:8a:a3:cc:ae:3f:68:bb:7c:f0:
64:31:b5:2c:29:4e:c6:d3:35:5e:c0:46:ff:25:4c:0e:0c:6c:
cf:17:83:75:d6:9e:7b:d7:e0:e9:92:34:7e:cf:97:7e:61:49:
3c:a6:87:72:73:74:8c:34:80:dc:99:3e:54:64:bc:d0:d3:fb:
15:b6:3e:3c:ed:e7:d0:1f:97:e4:69:61:66:1a:a1:4e:b2:f4:
d1:a1:ca:f7:99:34:6d:2f:9c:23:77:21:39:0f:b9:7e:e3:3c:
e3:27:e0:3d:eb:2f:52:32:c0:dd:aa:1d:c5:d6:fd:f1:63:90:
2c:cc:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:59 2025 by rpki-client