Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: QzPDASBrb3Kis5g9ZVBJoz5tzN6rfkKRbeUoG2GZLlQ=
Subject key identifier: C4:AF:AE:34:9C:38:84:40:6F:D8:87:4D:47:0B:6E:13:64:AC:5E:A6
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 0194BBCDC727FC09585E3D1D7ABD608C436A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0B00
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: FBEXDKY8EAMg2tfH340k+kPe2N1a3XKOWX5d4rxJfu8=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:27:fc:09:58:5e:3d:1d:7a:bd:60:8c:43:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=c4afae349c3884406fd8874d470b6e1364ac5ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:a5:dc:34:a8:94:ae:fd:80:0d:7b:51:5c:
51:92:72:4f:f4:12:10:50:4b:ab:16:d3:29:97:d6:
78:48:5d:db:15:01:73:d7:e0:bd:d7:3e:ff:8f:ad:
25:6b:68:24:90:99:ae:8b:8b:1a:fd:21:ff:4f:51:
ad:70:c3:c7:8a:0f:ca:04:4c:1a:fb:ac:44:f4:5b:
d9:e6:96:b3:43:e0:58:25:9e:c8:bc:c1:9a:ee:a0:
0d:2b:4e:06:58:58:12:44:17:f2:dd:ff:2b:d9:05:
d6:fa:81:ee:4c:2b:0c:cf:00:36:d3:c6:1a:2a:44:
4b:8b:b5:fd:74:c6:f9:de:c5:d2:6f:1c:04:50:c1:
e7:99:1a:32:2b:95:1b:53:18:bc:6a:00:aa:70:50:
2a:04:f2:4a:5f:20:12:5c:98:f7:7c:ed:81:1a:d3:
53:90:08:18:54:d5:57:d5:b3:11:31:77:5f:99:b3:
79:eb:cb:12:b3:ed:27:f6:9e:6e:ac:1f:4d:5d:6d:
b3:b9:c5:05:b5:40:d7:f3:94:8d:da:69:ca:7f:78:
bb:26:79:5d:36:99:fe:ae:37:52:93:30:58:61:f8:
1a:d9:26:31:70:d9:48:fd:90:6b:43:57:25:27:ad:
03:b8:3c:20:b3:0d:4f:0a:9a:c1:cb:9f:4c:53:20:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:AE:34:9C:38:84:40:6F:D8:87:4D:47:0B:6E:13:64:AC:5E:A6
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:2c:52:38:18:57:63:c5:94:55:9b:94:43:8c:2c:24:b9:
63:20:29:ac:a7:29:71:d5:d1:72:61:76:a9:6a:1f:5a:69:22:
33:ba:4a:26:e9:40:46:5f:9e:c9:8f:cc:2d:3e:fb:5e:ae:4e:
00:5d:63:04:dc:c5:cf:de:ff:bd:85:f3:48:87:69:a3:10:65:
02:65:ee:2e:cc:22:7e:bb:76:8a:90:63:68:62:d1:ec:b7:88:
b6:c0:16:84:49:a0:7b:31:9b:85:b2:91:b5:91:bb:c5:74:5d:
c5:57:34:ed:6b:50:e5:d6:b4:83:01:64:34:7e:c3:9b:44:f9:
63:bb:33:09:ab:18:63:70:1f:48:b6:68:30:9d:fa:15:75:b6:
a8:17:86:ee:e8:eb:97:64:2c:13:eb:55:f3:6b:ce:61:fe:10:
92:4f:57:41:5c:e2:4c:2b:57:0a:22:12:38:64:8d:7b:15:2e:
69:3c:cb:01:3f:fc:a5:22:5b:5f:49:18:65:31:01:fb:14:52:
28:e4:bc:c0:83:22:24:1a:9a:fd:ee:65:45:27:bc:85:c1:93:
88:6f:10:c3:f0:3a:d9:19:5f:f7:a2:19:01:d8:f8:80:55:98:
ec:7b:07:d3:37:17:0e:f4:ca:da:d0:d2:15:9d:3a:55:37:29:
b6:15:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client