Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File: QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier: NgJq7MkxVv5WY+/8XwMZCo7Ds84qcrUSWlA39oTaSFo=
Subject key identifier: B6:97:D9:86:1C:D8:4C:55:A9:61:58:0C:42:57:E4:FF:17:91:47:FD
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial: 0194BC72D94C874A10D64A56B32EB1EF3B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number: 0987
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: vNHKrU9tdKmlEkPOJS3bb1ZZ6iOK8oYGkSom0GNrUZM=)
2: mDj0VP-jqiKwJjt-lOQdn-slpWo.roa (hash: nmxfsT+G50uuChDyNePbK+N70F1vF7/NLgZyTdzlZ3A=)
3: qi8SjamVLTZcWUyfEiVS4BoqkZE.roa (hash: 6lwU9eJcpe8KWWxmMOizpAa94mxqfcksgtQmJaF4BYg=)
4: xJg857yIwhyEdYeIjcGRADD28jk.roa (hash: 5mboHsfsR9FT8/O1wonNqgc6c/V/+s+AZdj8ipNclaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d9:4c:87:4a:10:d6:4a:56:b3:2e:b1:ef:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=b697d9861cd84c55a961580c4257e4ff179147fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:78:ad:e9:89:7c:ad:67:2b:d1:30:d2:e5:
11:16:d6:11:b1:a1:6d:ee:5f:a9:19:f8:0e:de:c6:
a8:38:99:f1:b9:b8:32:09:6b:e2:ec:dc:47:9f:85:
ee:78:91:dd:88:47:25:a3:5a:68:c9:d8:31:0c:14:
ff:10:07:5d:fd:e1:7c:57:9e:55:bd:3f:cc:0c:7f:
cf:74:2f:0c:19:eb:6f:54:b9:7e:be:18:59:13:35:
5a:c4:25:3d:b9:9c:0c:9a:72:f9:55:80:bc:df:15:
68:a4:d1:6d:ca:73:a1:dc:2f:7b:80:42:e1:e5:79:
88:f1:59:c3:51:34:76:eb:aa:ea:c4:86:38:a8:a5:
24:e3:9c:00:79:39:45:27:cd:f3:cf:0b:10:1c:ea:
e1:74:04:90:d4:7e:ad:f5:c1:44:ce:33:e6:9c:94:
ff:10:6b:44:e7:85:15:ed:de:f4:77:2b:f0:56:2a:
38:23:f0:92:59:ca:9a:86:f2:c0:8a:9a:86:4e:04:
3d:d9:81:03:a3:0f:72:2b:e7:65:0f:39:8b:a3:08:
ba:f5:29:82:56:54:16:36:bd:bd:09:a9:a0:cc:66:
1e:6d:15:eb:a2:4b:30:bb:23:5e:30:93:34:6e:f5:
b7:c0:a2:71:bd:c9:52:49:d2:83:cf:2f:aa:d0:7b:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:97:D9:86:1C:D8:4C:55:A9:61:58:0C:42:57:E4:FF:17:91:47:FD
X509v3 Authority Key Identifier:
keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:13:c3:ba:7d:f4:60:fc:ca:38:48:93:22:66:28:c3:34:
5f:6b:3f:2b:13:69:f9:bd:38:e4:98:e1:c9:2a:c9:cb:d3:e5:
90:c5:8a:70:63:f3:3d:c7:52:af:c6:3e:9b:47:b3:31:2f:ea:
36:e2:ab:da:85:6f:38:50:c2:c7:a2:db:b5:e3:90:71:28:d5:
29:b3:ff:27:9a:f2:fa:8c:9b:04:2e:48:3d:06:bf:aa:3e:ac:
52:50:8c:4b:a5:7d:b9:99:23:31:ad:18:6e:49:5a:fa:84:5b:
04:39:1d:5b:f8:18:c8:42:38:3c:5c:83:03:e6:cd:93:40:1f:
4d:9a:3b:50:dd:d0:8a:de:96:e8:61:b4:dc:56:70:e6:25:e7:
99:cd:4d:bd:88:5f:57:58:17:87:2b:4d:54:d1:a9:e7:7c:83:
51:99:7e:39:57:5b:23:ac:2c:32:40:fd:54:d6:8f:10:38:33:
83:86:01:42:6f:e6:38:4c:8c:8a:0e:0c:6e:d7:ed:7c:8f:8a:
cd:38:70:69:84:96:5a:2d:b1:3e:9b:18:12:32:fb:db:72:58:
09:68:28:c2:ac:27:34:ab:bb:83:79:c6:ad:2a:6b:f8:52:e8:
27:d1:8b:43:08:ea:86:d2:f7:92:81:96:75:df:eb:d8:46:4f:
cf:e0:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:39 2025 by rpki-client