Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: v9ZfaG7QeqRnqP7RVZAFc8IWueb/UGnOe0dDR4QV5Jc=
Subject key identifier: F9:AB:C0:64:E5:18:0D:E1:A6:0C:48:EC:58:EF:67:5C:A3:BA:2B:03
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0194BC72D0CCAE7819646387FA7B48DF56C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: HFfKq4Ox561G3ha9QV4xMefSGFYzASVIOgCTfaDoCuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:cc:ae:78:19:64:63:87:fa:7b:48:df:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=f9abc064e5180de1a60c48ec58ef675ca3ba2b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:8f:f2:fd:a5:5c:cc:aa:d1:1a:33:9c:c2:
b3:de:f8:6e:6b:38:c5:cb:93:59:dd:19:d6:45:9c:
ac:05:50:a4:e9:aa:c8:54:b9:f1:61:b5:e1:57:72:
6b:b3:64:54:ca:da:bd:05:78:55:6a:a7:97:43:fe:
51:90:ae:05:32:7f:1c:a6:1d:a3:22:9c:e9:24:73:
c2:91:fb:7b:2e:8c:14:08:c7:d5:1b:4b:28:40:8a:
a5:51:3d:cb:4a:10:0b:e3:ad:63:cb:50:11:25:3e:
ef:99:e0:04:d4:ac:ca:c2:d1:49:62:72:5e:28:7f:
46:0d:15:84:79:9a:b2:69:00:0b:11:a4:e9:d3:ae:
3a:73:52:0b:21:86:c3:24:af:85:89:87:9f:01:c4:
e1:64:62:1a:2f:ff:dd:40:70:03:d3:3d:1f:8a:77:
1d:34:40:a8:39:cc:5f:2f:8b:da:0c:3a:45:df:b4:
8b:1c:6e:e4:a6:79:2d:99:24:81:3c:f4:4d:67:44:
68:e5:39:47:b9:c5:c5:80:7a:9f:22:97:79:47:5c:
60:45:c4:57:bd:f1:44:fa:b6:cf:0c:bf:fe:d7:9b:
b1:fa:1e:3d:bd:40:70:8b:48:58:39:1e:b8:ac:35:
b9:6d:58:0a:91:4c:2f:1b:40:4c:c7:78:29:ba:67:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:C0:64:E5:18:0D:E1:A6:0C:48:EC:58:EF:67:5C:A3:BA:2B:03
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ed:00:20:26:67:c3:a7:bd:02:60:49:96:45:24:42:b3:4f:
9c:1d:fb:31:56:72:e1:0a:79:95:74:04:f6:20:a2:7a:c8:ba:
65:ae:55:62:1c:e1:4b:fa:06:e5:81:fb:b5:c7:53:c6:cf:bd:
0f:b3:81:11:78:65:db:d5:93:e8:38:f3:ad:3b:e5:28:5f:17:
68:82:5b:5a:c0:20:06:76:a7:14:3d:67:54:c8:86:65:42:4c:
a1:e0:0b:78:c6:be:cb:2d:20:f1:26:18:59:56:63:e2:3b:61:
88:fd:81:8b:75:c9:4a:ab:4b:5f:25:7f:3c:0d:42:35:f2:6b:
0b:e9:7d:c1:1a:1f:3a:64:1d:d2:98:62:d2:ee:09:56:c8:41:
2c:24:30:bc:aa:f0:ad:d6:18:df:a6:76:6e:02:74:bf:9f:1c:
6b:1b:7b:b5:06:ff:7a:9e:77:f9:17:47:98:4e:fc:a8:b4:5c:
42:e5:62:e0:c9:ec:1c:0c:1b:99:03:0d:e4:1d:2d:87:1e:1b:
65:0d:98:10:cb:2f:d5:30:cc:2f:53:45:fd:3e:22:ad:d8:eb:
75:4b:8a:cf:15:c2:c4:7c:6c:73:05:79:ed:4b:61:0d:dc:1c:
4f:d6:90:a3:96:e0:50:ae:35:5d:a8:96:e9:8b:42:da:3c:0b:
9f:99:d9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:35 2025 by rpki-client