Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: eJGXQI/q446W1ztil7nsW85sT+fgwmOdJqxbIokzl0o=
Subject key identifier: 10:EE:DE:63:54:48:CF:76:A7:85:B0:9F:E5:40:91:BC:32:7F:85:DD
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 0194BCA98C5EB970B89882EB706E05594A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: DjGwh0JP9w1Xs50BVm0z+/mesIfVXQutMIJMee9RZl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:5e:b9:70:b8:98:82:eb:70:6e:05:59:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=10eede635448cf76a785b09fe54091bc327f85dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:06:1f:11:b0:63:5a:00:02:fe:09:9e:4d:
a6:6c:af:6e:62:ee:1f:7f:28:84:b0:7d:db:39:20:
ba:cb:f8:a9:b5:77:8c:a9:60:6a:f5:50:34:d9:bb:
b9:0c:e1:4b:a9:42:fd:d1:71:e7:a0:39:a8:0b:1c:
96:8b:0d:cd:47:e0:2c:61:a4:16:a5:bc:c9:e2:61:
15:0d:ba:77:13:51:10:23:21:d3:4e:6b:ea:ce:aa:
09:78:f7:72:f8:ca:25:35:63:bf:0e:95:2c:2d:54:
56:11:79:a2:b5:11:82:7a:23:43:49:eb:24:75:73:
12:4a:99:6a:7a:e7:7f:1a:5a:e7:69:11:42:17:8a:
83:a4:9a:4a:93:86:33:aa:e3:34:e5:59:2d:27:28:
14:78:1c:3b:3c:ff:ea:15:12:e9:fd:bb:78:15:27:
91:63:37:c1:e6:3a:cb:ca:0d:5e:54:f3:6f:2b:bb:
c0:a9:65:a1:a6:da:c4:14:5b:6e:55:c7:9a:70:7d:
ba:00:5b:db:0a:42:e7:21:ca:20:8c:b8:01:d3:4a:
b9:98:fc:c7:01:98:51:8e:33:ea:7f:92:f5:41:63:
17:33:95:0b:cd:60:65:3a:9c:81:63:1b:56:6a:8f:
e4:93:14:1c:2f:70:be:0d:15:b8:c5:74:ff:c8:03:
5e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:DE:63:54:48:CF:76:A7:85:B0:9F:E5:40:91:BC:32:7F:85:DD
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:31:81:57:e0:b0:4a:c2:df:29:20:7d:f8:ef:8d:e4:ee:
f8:42:b3:5d:e2:93:b6:c6:dd:c0:dc:4a:92:f9:40:90:ec:90:
45:f2:a3:ae:62:c1:6e:e8:26:d0:31:f0:29:0f:f0:d0:7a:35:
2c:5b:26:a8:d8:6e:fb:c6:b2:ec:dd:15:72:47:45:f4:7a:39:
2d:5c:bf:39:79:39:be:16:e1:c0:7c:1a:e1:b7:e5:d9:83:2c:
cf:b4:74:b1:ba:b6:cd:c4:28:89:c9:6e:97:9c:63:79:d5:d2:
84:5d:71:d3:e7:7c:78:11:53:ac:b7:8b:c1:93:34:be:3b:48:
89:f9:39:c2:cf:14:63:4b:dc:2d:44:ae:da:c4:6f:df:00:83:
54:3f:da:1c:85:a4:32:c4:53:fb:99:65:d3:b8:7e:28:50:72:
5f:7e:66:85:2d:ab:19:c6:ce:3a:dd:41:88:b5:1f:a3:44:0e:
3a:70:d9:b5:f9:a3:49:01:fe:e3:69:4c:77:ac:a2:56:c3:b6:
76:b4:c7:54:7b:5d:5f:84:b6:7a:a1:46:7a:9e:5a:d0:9e:fa:
45:00:87:dc:cc:fe:de:4b:84:25:d4:ee:20:b5:d3:9b:4f:de:
33:77:87:eb:5a:bf:f2:7c:31:47:b6:ce:b7:c3:51:9d:9f:d3:
e3:e3:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:59 2025 by rpki-client