Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: Rsr82iRb9VKxohlHVSdAR5FB0RujPtbPQW4xZZq/eCg=
Subject key identifier: 51:00:5F:36:94:4D:AF:87:8E:B9:F7:EC:BE:9C:0E:A8:32:6E:2A:81
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0194BD4E38BB52274B1C8A11B39FCB84BBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: 8/RiAk9lz5d7H8Knen3QL4DWjRDcFRxU6OWGJ4OCe/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:38:bb:52:27:4b:1c:8a:11:b3:9f:cb:84:bb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=51005f36944daf878eb9f7ecbe9c0ea8326e2a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7a:08:cb:00:0d:ec:fd:ab:3a:f3:19:31:d3:
43:41:89:d8:6f:bc:3f:35:b1:bf:4d:6b:5d:bc:50:
0c:d3:a8:e0:50:47:39:e1:b6:bf:c0:7a:6b:aa:08:
d3:dc:66:2a:b8:d8:4c:85:08:20:a4:aa:cb:4d:2d:
e6:25:37:e0:da:cb:12:24:b7:bd:0c:49:03:f6:e1:
d4:54:35:d1:e8:35:d2:f6:fd:77:d3:a3:79:e1:53:
6e:84:30:f0:af:1a:af:36:35:29:5f:c6:ba:d7:4f:
d8:3b:98:dc:5a:d3:b9:c2:b7:b4:bf:49:c3:9e:24:
9f:64:a0:17:4e:4c:e0:17:9f:21:e8:ad:de:a2:52:
d4:72:cb:a6:db:9d:1f:38:f4:23:a5:b3:cf:ed:1d:
b8:89:1c:c8:a5:75:99:d9:d9:2b:e3:42:3f:9e:61:
7f:22:b0:fd:00:a5:0f:d5:4d:62:7e:78:cd:f0:71:
53:e7:f8:80:27:93:2f:68:26:dd:9b:b5:71:5e:fb:
17:4b:37:f1:1f:14:f9:fc:5f:e8:ee:62:fd:66:8f:
0f:b3:e8:6a:8e:74:ac:5b:8c:dc:96:24:47:eb:29:
68:3e:cb:8b:0d:65:19:91:20:3b:5c:81:52:ba:de:
62:2a:72:87:ab:36:17:af:65:8c:f3:49:33:7b:24:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:5F:36:94:4D:AF:87:8E:B9:F7:EC:BE:9C:0E:A8:32:6E:2A:81
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:66:7a:90:54:8d:a8:a2:d5:9b:d3:7b:01:d0:e8:32:af:c4:
a0:37:a9:ab:2c:3b:ed:b9:5f:f8:a7:6c:64:60:fe:a1:7a:eb:
55:20:d1:e5:7b:5f:25:d2:52:56:66:e2:20:86:d2:41:37:98:
3a:5a:97:32:b5:7a:3a:72:c9:a6:41:6c:d9:cb:81:b2:a8:08:
e5:8a:ea:0e:63:4b:88:8c:1a:b6:0c:11:54:91:6d:76:ef:be:
c9:42:2a:22:cf:38:10:c1:68:5c:ea:06:ff:f2:46:b4:4f:53:
ca:e6:17:35:86:9b:38:32:e1:15:21:80:00:95:21:ec:5e:64:
ad:34:63:43:4d:8d:e3:ac:81:0b:06:be:fc:8a:55:43:2f:78:
cb:9a:a1:b6:f9:d1:61:31:c9:17:cb:9c:09:7b:4f:fa:e8:d9:
1d:7b:22:e8:97:7c:5d:93:d2:f7:28:b7:35:c9:41:69:71:28:
ae:14:d7:56:dc:c5:23:9b:db:09:6d:de:33:1f:c8:57:c1:24:
a9:00:38:8a:29:ec:bd:f6:bc:91:d9:70:63:0b:93:ca:f3:97:
9a:ad:d0:6c:2e:99:83:b1:a8:9c:49:c0:c0:82:58:c2:9b:94:
7a:32:af:c2:c2:49:8a:03:b5:25:c2:5a:27:2f:bc:87:c9:89:
9e:af:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:55 2025 by rpki-client