Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: qsNLtqYDASjjWPDWggLVMFvpLBT3OeG+H+wo0wy35EE=
Subject key identifier: 56:97:00:68:94:43:FC:36:D6:8D:E2:AA:42:D6:32:33:3E:2F:9B:2C
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0194BC731C675B71A05E7052349365BC4508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: qvAYJ2c39PF/Z9lpMghaeafZushc5dduBIWDH7Y5Mxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1c:67:5b:71:a0:5e:70:52:34:93:65:bc:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=569700689443fc36d68de2aa42d632333e2f9b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:7e:87:aa:26:e0:1d:88:9d:b7:18:6e:0f:
c7:e8:95:4d:53:90:37:20:32:8a:6a:e3:a0:8b:31:
0e:26:84:72:7b:83:e6:04:27:97:9f:b2:57:0d:5c:
05:49:f8:4c:18:e2:c3:2a:ac:e5:33:10:b8:17:07:
91:ce:2a:0c:11:1c:41:0d:fa:19:a9:f7:a9:43:d8:
b0:a2:a5:0d:10:26:11:ff:a3:a8:ef:07:e1:2f:16:
92:8a:65:ed:8f:4d:5e:6f:39:25:a8:78:d2:6b:2b:
23:3a:e1:f3:dc:55:5c:76:a6:6f:00:11:50:fc:e2:
48:49:de:0c:7e:91:9f:57:cf:7c:82:a3:a7:0e:79:
e9:77:91:c7:bd:92:c0:0b:a3:75:0e:47:58:45:5b:
7b:1c:92:05:46:18:a1:ec:c6:bb:c9:cf:39:4f:1f:
88:95:28:eb:f7:c0:c3:46:8f:ba:da:e4:16:8c:67:
06:a4:d6:5c:38:13:f1:7f:95:34:d5:62:0d:74:b3:
b5:3b:95:94:38:01:bb:e6:61:56:24:ec:b1:21:d9:
4a:c5:27:44:1e:86:cc:49:bd:e6:94:e3:a4:f0:d2:
d6:d1:0d:a0:90:f8:4b:ca:ef:77:58:79:82:42:27:
da:6d:9c:43:44:d8:8e:d4:74:00:14:a6:e0:a2:ff:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:00:68:94:43:FC:36:D6:8D:E2:AA:42:D6:32:33:3E:2F:9B:2C
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6d:5c:33:44:c3:2b:92:d7:b3:1e:83:85:67:66:90:35:fe:
ed:e6:d8:ba:ab:e5:c8:a5:a2:b3:de:e7:d0:ac:4c:35:c9:48:
28:34:08:28:03:5c:c0:d9:19:49:29:ac:ca:ae:fd:b9:32:f2:
3f:49:55:9c:7b:20:00:69:8f:7a:45:29:4d:84:6b:cf:b5:11:
0f:f9:91:d6:11:92:0e:ab:7c:cc:94:8f:28:14:76:30:0f:f5:
0e:66:6b:56:9e:04:a7:50:6e:3f:99:34:4a:f4:a3:87:34:9e:
1b:0f:16:4f:68:ea:b1:67:5e:48:71:ae:09:b9:c7:2a:9a:2d:
b9:79:cb:4d:7d:6a:8f:fb:9e:5b:fc:64:e2:18:97:c9:c2:fe:
49:1e:87:f4:48:12:6a:4d:ce:0b:5b:bc:83:1a:1b:eb:b6:d5:
cc:f1:5e:04:57:41:cd:cf:b3:6e:0f:36:0d:c7:cb:b1:32:95:
9d:0f:1e:3c:ee:49:6c:8a:fc:5f:8a:88:49:1a:33:39:76:7a:
a0:a6:6e:f2:af:02:3a:45:56:47:9d:5b:ef:e8:c0:30:d6:0c:
5a:af:08:df:15:3a:82:36:42:4d:1b:55:6e:7d:a5:58:5e:98:
bb:57:d8:f7:72:b3:cc:5d:17:4c:70:25:d2:57:30:fb:6b:f2:
db:30:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:43 2025 by rpki-client