Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: BRNunig2xp4FjktSuQgaNhzLfW8vONOpuTwzvBzqXeU=
Subject key identifier: 42:2A:5F:E5:0A:DF:56:EF:AB:C1:E7:E7:B7:A6:5E:92:F6:09:16:04
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 0194BC04FE18842921E2D342613C7DE48A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 10E3
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: cDH5NZ4V4RRXHx7mH1QCq9lNDeyYRSaX8OYU/lmWwoA=)
2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:18:84:29:21:e2:d3:42:61:3c:7d:e4:8a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=422a5fe50adf56efabc1e7e7b7a65e92f6091604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:e9:51:d8:50:8b:d3:d8:82:c8:0c:2f:85:
77:17:0e:fb:90:e9:a3:01:46:c8:a8:13:9c:84:c2:
f0:1e:5e:86:d3:64:d5:34:53:76:a8:8a:b4:ed:59:
f6:57:04:21:1f:03:e8:98:0a:a9:d5:dc:37:98:24:
b6:a8:73:26:39:cf:e5:7b:61:a2:df:89:ff:8b:d6:
9a:ff:be:66:56:8d:96:b2:4d:4a:c3:fd:61:79:69:
5b:88:cf:0c:73:56:26:52:80:96:9e:5b:da:a4:aa:
f9:58:a2:65:5a:fa:d3:7f:87:1c:12:1e:51:7f:c0:
80:7a:e6:8d:a7:34:df:66:4c:42:8f:f5:91:3c:79:
9c:96:49:74:3e:3b:a8:87:a2:00:5b:69:36:73:4f:
f0:3f:7a:27:22:be:15:81:20:04:63:e6:65:03:a1:
85:cd:53:5c:07:f8:ad:48:5b:26:07:6d:34:c5:74:
3d:ab:d9:35:4a:dd:b7:e1:ae:f6:df:b0:9f:08:6c:
b6:2d:ff:4e:72:01:c2:5c:33:ea:f6:53:96:e7:4c:
a2:25:ea:37:27:da:9b:a1:f8:e9:e9:f2:a6:75:14:
da:ce:a0:a6:bd:b8:0b:68:c6:4a:ec:b1:55:22:6b:
7c:5b:5e:34:fe:17:64:9a:c4:fb:89:fc:a4:c3:b7:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2A:5F:E5:0A:DF:56:EF:AB:C1:E7:E7:B7:A6:5E:92:F6:09:16:04
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b0:28:d2:0a:95:b5:4a:dd:31:b7:db:d6:e5:4f:02:cf:a7:
73:b4:fd:b8:fa:a4:8f:9a:88:2e:fc:ae:f5:4f:a0:93:03:db:
4f:43:64:90:9c:41:68:cc:cc:bf:2b:29:2a:15:cc:89:b8:fe:
08:d1:0a:2e:98:cd:9d:5c:97:1f:53:b5:f2:42:3f:84:ca:3c:
5a:98:53:32:24:d8:2a:59:fb:03:9a:a1:04:e5:ca:4a:d9:87:
5b:2b:ec:31:91:c2:4d:78:e4:2e:45:0b:78:bc:97:c7:f6:fa:
19:b2:93:bd:83:6f:7f:fe:1e:90:28:dd:9c:2a:2b:55:41:c5:
fe:cb:7d:e6:98:d3:20:80:af:a8:20:f1:df:76:72:c5:2a:21:
32:75:05:eb:ad:f6:82:d2:40:13:97:c4:d5:d4:87:ef:10:88:
5c:18:65:c0:cb:b8:fd:27:f6:b0:13:13:2e:12:9a:c1:84:55:
e3:f9:14:15:88:0e:d3:92:f2:35:e7:e7:1a:ac:98:cd:5e:83:
b3:a6:97:3c:5c:a4:eb:95:c2:8b:db:6d:d9:30:be:03:54:8a:
a0:1e:87:57:dd:66:94:57:0b:59:f0:c3:b7:d1:42:97:65:d6:
34:a2:d5:81:f3:23:1a:91:dd:59:43:8a:b4:29:22:19:d2:00:
a4:b7:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:22 2025 by rpki-client