Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: XiIE/v2BZ1qw4kSADsyYk+JPq7j9v0XXEv2ixLFLW3g=
Subject key identifier: 89:C3:DF:D5:B0:59:9F:1D:59:9A:91:CE:6A:2A:70:4F:D0:95:17:C2
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0194BC3C30A57F2CE2B96CB90C29427C4E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: zYLCsl6KhCQi1QaqRc18vL65Dtxp0N8DE8dLd8YCXao=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:a5:7f:2c:e2:b9:6c:b9:0c:29:42:7c:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=89c3dfd5b0599f1d599a91ce6a2a704fd09517c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:da:42:35:bd:56:b8:a3:7b:d1:d7:51:04:
44:2e:fc:31:7c:08:c3:0f:b9:69:bc:fc:da:53:56:
dd:64:71:52:dc:90:26:ed:38:a9:5b:e6:ab:c6:ab:
a6:45:ad:d6:1f:4b:dd:10:00:e0:f8:a7:65:02:5c:
1c:19:6b:4c:1d:56:de:d0:0c:57:81:77:6d:4e:02:
7e:21:5a:14:1d:fe:17:ce:44:14:60:c7:9b:7b:aa:
79:28:58:f5:0a:52:56:8e:cc:3d:7b:4b:96:17:03:
9d:a1:32:2d:73:12:9e:19:ff:c3:07:3d:99:fb:6b:
96:5b:52:45:7b:c3:10:e9:87:6c:c0:fe:0e:9d:70:
7a:66:be:c6:b4:ba:1d:26:10:de:29:1a:75:2f:42:
67:ef:cc:18:36:2d:8c:4c:b2:5c:ea:d0:25:d4:2b:
2a:de:4b:ee:72:93:20:9d:11:8f:b5:e9:47:d9:2f:
c9:76:fc:db:02:12:a9:04:1e:aa:df:d0:8c:2b:0e:
48:6b:67:d9:da:41:ea:ac:98:e5:09:b4:61:f7:59:
ee:28:fd:24:a0:10:53:dc:bd:20:99:9c:60:4c:0b:
30:2a:72:55:93:ed:a5:9b:4f:bb:db:c1:dd:75:d0:
d5:c0:7f:08:4d:d3:06:0e:f7:ea:3a:06:d8:f0:15:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C3:DF:D5:B0:59:9F:1D:59:9A:91:CE:6A:2A:70:4F:D0:95:17:C2
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a5:d6:cf:7f:fe:7e:cc:a5:42:55:c0:32:9a:d6:8c:12:e7:
05:3b:83:22:43:b1:3a:ec:46:09:d3:a3:79:27:40:c1:c0:05:
be:8f:86:0d:51:34:da:b1:93:16:9e:f9:43:3b:0b:ef:c9:62:
1b:d2:a8:5f:8e:6e:33:60:d9:42:19:33:f0:2e:02:a7:e3:64:
af:79:88:05:50:66:2d:a5:15:a3:74:49:eb:af:18:4d:68:b2:
c0:c9:4c:0e:ad:b1:d2:33:3c:07:e4:7f:79:40:7a:2b:5d:63:
be:98:60:85:9f:67:47:de:77:bf:dc:f1:55:fd:02:a8:41:f2:
f1:94:19:51:77:74:d9:d6:cb:89:ba:17:bc:e1:1d:44:b8:51:
19:7c:2d:8a:63:00:ff:8b:50:cd:ec:48:9e:9e:53:d1:44:69:
38:19:d1:e8:e9:aa:d9:53:a7:ab:eb:4b:c6:e5:51:37:4b:a5:
b2:1c:62:c6:21:af:92:1e:40:38:12:e9:5b:74:94:c5:55:19:
38:65:35:2d:3a:f8:b8:52:28:89:2b:46:26:61:69:f1:79:eb:
8c:32:95:8c:0e:07:19:61:33:08:e6:e4:62:f1:57:61:a4:9e:
de:c5:e3:7e:0d:97:de:b8:32:de:b1:f7:41:49:f7:3d:f9:ee:
53:83:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:45 2025 by rpki-client