Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: CGXomgr0kZpdaU1G02RpdwtWTywBaEscisk5zzK7pgA=
Subject key identifier: C0:68:F4:15:9F:6E:34:1B:B0:99:F9:B8:2D:7E:EC:4F:F3:4D:41:C8
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 0194BCE05918B16516DF61346A777DD2B399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0590
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: PMt1gz6DNFUi//ULXLzKzjnmmNqMY2+PwEoYdaPAn/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:59:18:b1:65:16:df:61:34:6a:77:7d:d2:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=c068f4159f6e341bb099f9b82d7eec4ff34d41c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:6b:91:32:fa:f0:3c:ba:bc:1e:72:35:d6:
4b:99:f9:2b:85:ff:4b:25:29:6f:f0:1e:03:4c:1e:
74:25:8b:5f:2d:f1:cd:1b:07:3b:b3:30:29:ee:a6:
e9:72:f2:92:ac:81:46:af:f4:31:93:3f:c5:e8:f4:
07:b8:83:1d:4d:f1:64:dd:da:21:0c:59:78:71:b0:
68:10:dc:3b:ce:30:78:41:c4:63:2e:0f:25:6d:5c:
4d:14:21:11:0d:6a:77:d9:03:b9:9b:7f:ef:1a:85:
a1:a7:b5:19:c9:c4:5a:f3:b8:8c:c2:20:d9:f9:ef:
4c:8f:71:e1:e2:c4:7c:6d:11:98:f6:dc:1b:37:fa:
00:21:e0:03:95:a7:6c:08:3e:54:a6:5f:34:9d:11:
bb:73:7b:04:10:24:56:94:0e:b9:be:9d:63:01:16:
f6:e6:66:81:b6:8f:66:9d:41:77:98:75:5a:47:5b:
5d:9c:b0:5f:cf:de:8e:bc:ae:41:d8:38:2e:76:5e:
7b:0a:17:49:41:d5:35:33:1d:cf:67:60:14:f5:28:
8f:57:27:69:e2:dd:89:10:3f:e3:fa:97:c7:43:7a:
50:17:b6:32:f8:f7:02:b1:92:ba:b3:16:1d:ea:75:
ed:97:59:89:dc:4d:d7:fa:6c:a1:3b:6d:81:22:1e:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:F4:15:9F:6E:34:1B:B0:99:F9:B8:2D:7E:EC:4F:F3:4D:41:C8
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:db:c2:3a:60:22:c0:4c:41:39:e0:78:df:3f:71:74:e5:15:
4c:af:68:4d:be:ca:4e:ff:66:c6:95:88:46:fc:4c:c7:90:3a:
0e:75:87:fe:bb:d5:18:e2:57:3d:02:75:7e:61:65:e4:41:83:
cb:5b:a4:7b:b3:39:1e:87:25:ac:a7:e5:1c:e0:28:7a:dc:cc:
65:00:d8:ae:ad:fd:11:2e:07:65:f8:53:e5:c3:62:05:e8:16:
85:e8:5b:1d:a3:b0:00:a2:f1:8d:e4:b2:f7:ea:a2:94:9f:30:
c0:7c:d1:ed:a8:38:33:5c:ee:c6:fe:9b:44:51:e1:de:1a:f3:
a2:14:69:36:c5:df:99:ec:47:02:2d:b2:2a:c0:84:70:e4:0f:
cc:fc:94:1e:8d:2b:72:53:80:0c:50:b0:61:ae:ef:1b:50:9d:
e7:7e:f7:f1:10:c7:a0:fc:03:d3:d1:b0:fe:45:ef:05:8a:ad:
46:f0:9e:b8:2d:bc:13:6a:3c:af:8f:9c:ed:89:a7:1f:ed:ab:
25:ab:1c:22:12:c5:10:6f:7d:5b:e5:b7:13:6c:fa:0f:07:8f:
0e:a2:19:70:5b:f7:e7:3a:8e:6c:08:c3:3c:4f:73:6d:f0:b0:
70:e2:62:df:6e:66:64:3a:71:e9:84:38:d5:da:a4:bf:b8:df:
24:17:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:02:56 2025 by rpki-client