Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: m64ea4xccCCayahVq9kYeAT9cdsg0Lb4N4A9O9brOUg=
Subject key identifier: 81:D5:41:41:0D:91:3F:4D:C2:8D:DE:30:44:DC:65:7F:6B:15:07:81
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0194BC3BCD95B00EC796B39130C9DB21CCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: nZj3YfdDF4EB+dyrOFmhrj6aDjeHgI/qTdUIn0juPfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cd:95:b0:0e:c7:96:b3:91:30:c9:db:21:cc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=81d541410d913f4dc28dde3044dc657f6b150781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:6a:a5:c2:00:86:e5:b5:ae:da:a0:84:4d:
b0:86:69:e9:5a:2d:2d:47:a1:09:11:e1:a9:62:ad:
a4:a3:bb:69:ae:e6:49:2e:4f:92:15:ab:00:09:60:
a5:ec:b1:6f:58:b1:bd:cc:7d:a9:84:35:b3:3b:09:
f7:08:d0:02:30:9c:de:bf:04:b1:48:e6:0e:c6:b9:
b5:0f:f7:8b:cb:18:18:ca:f2:80:0f:58:69:47:f8:
9b:f5:79:21:49:10:0d:db:ec:9d:74:86:1b:2d:ae:
56:1d:47:87:69:67:13:59:99:39:c8:56:72:f4:5b:
d4:74:ec:f9:7d:73:b5:e7:c7:e6:c2:62:da:e7:56:
da:16:b6:2b:54:77:35:98:d5:0b:72:27:99:57:a1:
e5:6d:d0:24:a1:05:3d:1b:51:09:86:6e:db:a0:53:
07:b3:16:2d:d7:3b:4b:d7:d1:31:d2:3f:2c:48:65:
bc:ad:ab:07:06:b2:00:a6:e9:83:17:68:59:18:cc:
77:25:3b:ba:c4:4f:d5:7b:9c:1f:9c:ad:15:8b:73:
8c:96:d9:3f:bd:b7:9d:5c:17:c8:cc:58:27:1e:98:
41:bb:ce:c3:28:f3:de:64:bc:86:f1:18:5f:0e:66:
c1:af:8f:24:c6:6a:16:40:9a:a7:a8:83:d0:7d:58:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:41:41:0D:91:3F:4D:C2:8D:DE:30:44:DC:65:7F:6B:15:07:81
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:69:27:21:9a:e3:74:2b:11:33:d5:17:3d:8c:c3:b6:2e:4a:
ca:50:bd:0d:56:e9:f5:15:3f:59:23:9d:f4:49:0d:24:9d:23:
11:f0:11:9d:f1:6a:03:14:16:0c:a6:f0:63:34:12:40:b1:87:
00:57:29:c5:5d:cf:8f:79:3b:ce:48:f7:e6:72:a0:99:3d:19:
dd:80:d9:11:a0:03:85:1b:10:fd:02:28:6e:14:ba:5d:0c:ee:
7f:d9:1c:70:d2:9a:8d:ad:d8:5b:a0:3c:9f:68:81:e6:1b:26:
01:96:68:24:f1:6f:e7:f1:bf:cc:0b:2e:0a:d8:55:a7:e3:1c:
df:37:fa:e2:6b:a6:3e:24:e7:f1:65:01:28:9e:9c:b9:0f:2a:
11:98:01:17:01:c4:78:49:70:f8:ff:ca:e0:58:68:c2:60:f4:
a7:67:9f:ee:a8:54:94:7e:35:fa:d9:64:7d:ed:a8:3b:1b:be:
f6:0c:dd:1f:03:cf:e5:e2:2b:4c:88:64:5b:7f:b1:6f:58:60:
dc:67:20:83:e5:6b:b3:64:2c:bb:9d:fd:78:08:e8:ae:be:cb:
1a:a4:ea:0f:9b:63:b3:f4:d0:1a:7e:56:be:12:d9:87:27:52:
89:94:52:de:de:28:5f:dc:36:a4:5d:ac:1d:e0:9d:db:f6:49:
6d:7f:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:08 2025 by rpki-client