Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: 4ryhOC9NW2ckdv3pkeMXnoGpoYhbi3swGw+K3zbC/A8=
Subject key identifier: CF:76:6E:B2:97:D0:7F:B3:F0:79:AB:13:78:29:9C:72:96:F3:DE:09
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 0194BD17959CFAAC895BF89AE9A714F8014F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 011B
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: OCmtvoyutUlmQYHtPYpUref_Lcw.roa (hash: Fe4u65PoUtBXtctFyHwAqLin/v4sGRun96RsjrSGCO0=)
2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: 2lZ42uhI6bB3IqHlpMLvbB+FMnUNAS08J+fE/Omhs2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:95:9c:fa:ac:89:5b:f8:9a:e9:a7:14:f8:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=cf766eb297d07fb3f079ab1378299c7296f3de09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:08:66:1f:23:bf:24:57:98:43:a2:a3:ae:
17:41:88:88:e7:c9:76:bb:24:b3:60:b3:ec:16:1e:
b4:0d:51:54:bd:2b:8c:c9:b5:39:14:3f:55:b2:e3:
89:c2:b8:f8:18:ad:14:37:62:da:0f:e0:b5:ec:a0:
98:93:8e:94:39:02:fe:19:5c:0b:88:ef:c5:4b:97:
be:f2:ca:ee:7f:e9:9f:9b:d9:a2:48:d5:e1:14:e7:
7f:a0:70:13:1a:32:70:d6:dd:30:ec:a2:c5:06:ba:
dc:4b:25:68:0e:d7:3f:71:b0:41:36:2c:ea:2f:10:
e0:c6:f1:01:e2:94:18:ca:b6:e1:8b:ea:7f:52:8a:
27:c2:2e:bd:b5:51:fb:1b:50:03:bd:0c:d1:73:e4:
a7:79:a9:03:da:e1:d3:cb:15:6c:d9:41:cd:2d:24:
da:71:f1:2c:6f:b6:f0:32:3c:ad:e8:7d:3d:6f:71:
86:a5:46:b6:15:5c:27:75:3a:44:b0:bb:76:2f:8b:
da:d7:af:aa:9f:99:f5:0b:65:26:69:49:9d:53:86:
ca:e9:6e:45:fa:e6:a5:72:d0:e2:62:3b:51:dc:ac:
62:8b:49:74:55:c6:8d:fd:eb:d9:b2:63:13:1f:44:
f3:36:b2:62:d5:38:93:c1:90:95:98:1d:50:15:86:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:6E:B2:97:D0:7F:B3:F0:79:AB:13:78:29:9C:72:96:F3:DE:09
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:42:18:fd:09:f8:83:dc:2a:cc:1c:f8:0a:83:d2:5b:ab:
aa:e3:aa:f2:69:29:56:4a:b7:98:80:63:6e:7a:41:7c:60:5b:
3f:89:b7:26:c2:42:91:a5:6a:30:04:a4:f2:8f:03:2f:50:43:
d2:4a:3b:63:13:19:48:05:9c:d5:9a:75:99:46:2c:eb:7f:6e:
cf:a0:7b:ba:41:e3:f3:a5:31:98:79:3c:aa:48:da:ce:00:13:
9e:71:86:62:a4:18:35:82:b1:05:10:87:5b:81:64:44:51:db:
c9:fa:70:13:e0:13:ae:f4:98:2b:f3:36:6d:91:a9:a9:bd:cb:
38:f0:7a:b2:16:dc:b3:03:1d:7b:a7:07:03:e2:f2:be:bd:4a:
e1:7c:d0:1f:d0:5c:c1:f7:25:6b:14:ef:fc:05:e1:da:60:57:
12:2e:db:87:91:39:79:01:61:61:93:49:42:30:9f:72:e3:e3:
84:9b:82:24:98:93:36:f2:ad:1f:62:1f:5b:22:85:15:f3:19:
fa:cf:c0:60:da:08:aa:7c:5a:12:65:19:55:49:0b:75:3b:82:
64:2c:a7:9b:d0:2e:f4:fc:47:4e:e0:22:41:ad:aa:68:56:b6:
05:3d:7c:a0:1b:72:7e:00:40:66:74:77:0a:c5:00:07:17:24:
7c:8a:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:33 2025 by rpki-client