Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
File: QWkOI5DpC72N5AIYrSIeCTvM7L8.mft (raw, json)
Hash identifier: OQMU40i9JtalLK8jKNSEDEMH/80IUhlL5REEqx61UmI=
Subject key identifier: 21:07:3E:69:DB:82:5D:09:F0:EF:29:E4:DE:B6:61:D0:BD:87:B3:47
Authority key identifier: 41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
Certificate issuer: /CN=41690e2390e90bbd8de40218ad221e093bccecbf
Certificate serial: 0194BC04D2D462962F20846F4A974127B5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: QWkOI5DpC72N5AIYrSIeCTvM7L8.crl (hash: Bb4sx4ZeJvBIO46EkGYpj0AIZWvA3jvqbHZAt4RwtIk=)
2: nsNEVxRNRAqK4M0HqDeGc01kd4k.roa (hash: u9cSwFwr5XiNLEjBeMMlXHN1pLGlDX3Y3bL8f/eEp3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:d4:62:96:2f:20:84:6f:4a:97:41:27:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41690e2390e90bbd8de40218ad221e093bccecbf
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=21073e69db825d09f0ef29e4deb661d0bd87b347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:fd:a4:11:86:45:e8:15:a4:0e:5a:8c:d6:
ab:53:59:62:0d:5b:af:27:9b:6b:b4:18:a0:5e:f4:
69:64:2c:87:71:70:90:9d:27:b3:17:da:44:61:79:
74:0b:fd:fd:ee:59:42:09:81:c7:3e:88:6d:8b:de:
29:16:2a:e9:d0:a4:60:04:d7:3f:f5:37:d6:1c:74:
a6:0c:84:8f:3f:6a:75:e2:bc:db:bf:cc:3c:74:76:
2d:b8:20:f2:90:02:41:ee:48:a7:13:7f:76:a6:b4:
0a:2c:5a:26:28:6b:37:b6:34:74:ad:16:94:bc:f8:
71:cd:d4:97:30:ca:75:33:0f:5f:67:d9:56:8d:40:
3c:e8:cd:4e:70:aa:7d:06:c4:b0:42:72:fe:50:b2:
41:d1:42:f4:64:46:1a:47:ff:3a:9e:95:6c:98:c3:
3b:f4:b6:3c:ec:e4:31:ab:08:08:81:ab:fc:8c:f6:
22:3b:64:cb:7c:02:7b:ff:e0:13:a9:d1:48:46:84:
65:03:bf:7b:09:23:85:31:62:de:3a:b7:0c:53:43:
c4:d1:e6:50:46:70:5e:f3:e4:4e:18:77:b1:01:12:
fa:75:cc:55:6b:31:54:ce:2b:4c:54:46:93:e3:0c:
d8:86:75:54:d6:09:03:8d:54:8d:fa:7f:40:82:8a:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:3E:69:DB:82:5D:09:F0:EF:29:E4:DE:B6:61:D0:BD:87:B3:47
X509v3 Authority Key Identifier:
keyid:41:69:0E:23:90:E9:0B:BD:8D:E4:02:18:AD:22:1E:09:3B:CC:EC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWkOI5DpC72N5AIYrSIeCTvM7L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2884aa-0ccb-49f2-90c5-3385d9bf1d80/1/QWkOI5DpC72N5AIYrSIeCTvM7L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:42:ed:6d:d2:18:61:b9:ab:7d:29:a5:5c:2c:01:04:54:f6:
be:43:b8:f2:82:0e:c4:1a:61:3b:43:dd:c7:df:19:5b:7d:f5:
5f:60:03:74:c0:30:b5:ca:f0:93:7e:bd:e9:b5:cd:7e:db:24:
92:32:bc:51:11:3d:89:50:45:10:05:4f:a4:c5:73:6e:12:8b:
6f:ab:26:d8:67:37:8a:fd:4d:e6:e4:39:e3:89:2d:ff:e2:3a:
0f:11:4f:5e:58:1f:25:1c:eb:7b:ca:e9:e2:00:1a:b3:12:0e:
be:14:ae:72:c9:01:40:24:9a:ba:c4:d4:f4:c9:74:7f:dd:47:
27:9c:6b:f2:7f:c9:4c:64:19:d8:3e:68:86:41:33:7d:71:94:
0e:50:a8:57:76:02:1f:ed:ea:bd:a8:9b:b1:3e:0b:87:5d:c6:
8e:fd:81:64:5f:2b:62:e2:0d:8a:cd:86:d6:e8:dc:d9:97:a3:
2b:ef:1f:94:fd:e8:b9:3c:6a:2d:a9:9a:a8:55:2a:0b:a3:ed:
34:8b:00:7b:68:28:83:09:3e:ca:d8:ac:8e:39:bf:21:78:da:
8f:e8:0b:40:f9:b2:96:1a:91:a0:aa:ae:4d:5f:f7:b8:6a:9c:
66:8e:f0:e6:7b:a4:76:63:fa:a6:5b:ad:bf:62:12:98:79:ba:
0f:96:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:18 2025 by rpki-client