Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: Xc1rrZFMEAKVJyQzW+c9gSND0cW4HzJqn9gBP4rK5IY=
Subject key identifier: 6B:88:54:E6:68:4C:33:68:EB:9B:17:CA:BF:D8:71:B3:73:AB:EC:45
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 0194BD4E6BB5965111974B4646CC058AE93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: TgEal1OuYPjkRZn8zScNcW4Hfsztx5Fq30OIKZJNEcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:b5:96:51:11:97:4b:46:46:cc:05:8a:e9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=6b8854e6684c3368eb9b17cabfd871b373abec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:02:d4:46:f9:8f:71:26:13:ce:45:df:f2:
c8:c3:58:b3:19:9f:05:a7:bf:24:8b:3a:5b:21:03:
a9:98:95:ab:32:3f:e9:81:78:77:c1:67:f9:8e:21:
e2:36:89:3c:0b:cd:69:8e:c3:90:40:e7:90:4e:7e:
09:f6:cb:ed:35:6f:6b:f5:10:1c:e7:c1:d0:0d:ed:
52:e1:ce:08:ec:a6:63:20:59:9c:84:0e:c5:c1:0f:
2a:1b:3c:f0:14:7c:53:c9:04:c7:7f:12:7a:2a:63:
fa:0c:8f:50:75:7a:87:25:d6:1a:f1:82:f5:1f:51:
17:45:e4:49:9a:3d:b9:0b:87:b8:ff:fb:ce:8c:0b:
cf:e5:42:04:7d:48:e1:e6:10:08:57:5b:59:8b:44:
0b:11:57:22:ae:70:c9:f7:5a:49:97:fe:5b:f6:87:
cd:c1:46:44:75:de:62:12:34:bf:6b:bf:77:04:2b:
b4:fb:79:ba:dd:29:f1:0b:d2:78:c6:69:0b:10:bf:
2d:b4:fb:b7:77:4d:af:0b:9d:8d:5c:fb:32:ea:6b:
9e:6d:88:59:14:ef:91:10:02:6c:8f:d7:2c:c0:eb:
1a:39:7b:97:f8:06:e5:5c:52:28:22:9f:f9:39:db:
2c:c1:b0:58:e4:1f:97:0b:56:9b:cf:d2:28:7e:b8:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:88:54:E6:68:4C:33:68:EB:9B:17:CA:BF:D8:71:B3:73:AB:EC:45
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:8a:2a:b2:2b:9a:dc:67:5e:ee:14:26:a5:80:f9:af:42:
ff:5d:ea:91:36:a6:8b:af:f3:9f:7d:f1:3d:c7:bb:09:db:db:
9e:9b:0b:aa:a8:17:3d:a1:65:43:f1:02:48:8b:46:40:0f:e2:
af:94:53:19:f4:25:b1:4e:34:bf:af:ca:c9:31:c4:1b:6c:80:
de:17:a5:cc:bd:fb:fc:b9:6b:93:5a:57:55:63:63:87:63:66:
69:6a:f8:1d:e9:d6:4d:61:86:45:d6:0d:57:78:34:c6:35:30:
87:7a:dd:12:d2:de:89:b1:cd:30:1f:84:39:38:e9:32:6e:a6:
4b:3b:a2:05:d1:eb:84:c2:15:54:0a:61:23:ac:93:33:7a:86:
95:18:97:13:cd:b8:11:03:1f:90:66:f6:42:40:3c:6c:2e:a9:
e5:91:ec:0f:77:8a:1e:55:9a:3a:8f:5e:fa:15:c8:7f:6b:98:
3d:7d:9b:04:40:29:35:9e:dd:be:95:1e:de:f7:f6:46:15:d0:
8f:0c:ea:2d:cd:fa:03:c0:83:3d:e1:08:1e:1b:b3:e5:4e:85:
64:3b:ba:66:22:c3:12:84:ef:02:f5:c2:56:fb:88:73:ca:3c:
27:fe:c3:0a:4c:90:16:21:8a:1a:d9:d2:02:64:e8:2c:de:33:
a3:b9:cf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:07 2025 by rpki-client