Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: MyXkujC4e9qc59AT4/OWmkRIQNASQmAvrAQIhAKe4zk=
Subject key identifier: 90:B0:D9:EE:19:4E:FB:03:8C:D8:B0:A6:33:A2:79:85:92:0E:6F:5D
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0194BBCE1B8107601900ABEB216C7FF03833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0D01
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: I8sPFa8/xfiqsGDRuIqCBfj8KGswsX3tWNVRffYMP3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1b:81:07:60:19:00:ab:eb:21:6c:7f:f0:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=90b0d9ee194efb038cd8b0a633a27985920e6f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:56:18:52:dd:b0:4a:81:16:77:26:76:a1:
36:af:3b:7e:8e:a4:d1:b5:22:b7:d8:9d:ca:a7:7b:
2f:e5:c6:25:56:25:d3:0b:b0:c1:e5:ea:a5:a5:8c:
64:4e:d7:54:52:b1:6e:92:b5:d8:22:04:c6:eb:2a:
6c:17:2f:0f:dd:e7:49:dd:bd:49:95:d4:8e:a6:38:
5f:3a:e7:5f:ab:82:8f:2f:93:43:e7:ec:d3:b7:2a:
4e:6d:23:1a:4e:bc:62:c4:23:40:b7:7b:17:84:14:
5a:a0:f1:66:6a:f0:14:c7:e5:bf:23:81:7f:56:e7:
ac:68:0a:12:42:78:61:f2:f3:6e:d1:11:e0:02:dc:
09:fb:d7:4e:ca:df:ce:6a:41:a1:f7:fe:22:54:2b:
95:50:fd:b0:6b:20:bf:8e:b9:c9:3a:d0:c4:cc:9e:
59:18:83:7f:0a:ec:07:14:f6:9d:b8:a0:ab:3c:1f:
72:44:8f:7e:4a:4c:3d:8f:8d:90:60:4b:88:1a:4f:
07:a8:a8:0c:14:e8:69:21:0a:97:80:96:a1:1a:34:
36:55:37:9b:15:89:02:86:37:78:5b:b2:89:44:38:
06:4d:be:62:e1:ef:9d:b4:11:62:91:91:2b:48:03:
8f:33:7b:67:f3:98:e3:ab:2f:17:fd:15:11:43:6a:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:D9:EE:19:4E:FB:03:8C:D8:B0:A6:33:A2:79:85:92:0E:6F:5D
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:04:f1:1c:08:60:26:0a:23:7e:ed:cc:fa:c7:c6:f8:09:8e:
83:3c:cc:e5:68:bb:6e:c9:dd:77:56:c8:a0:3b:10:e3:a8:6c:
ef:9c:ac:dd:89:b6:d7:78:62:44:08:bc:dd:3b:2b:87:75:ee:
12:93:22:37:f2:5c:cb:9e:0e:b5:ce:b4:1e:4b:73:03:d8:07:
70:36:7e:16:cb:95:e4:ce:a0:ba:7a:71:67:57:f8:1b:1f:14:
41:98:57:19:ae:0e:80:51:76:ae:93:bd:df:8f:da:4c:3e:55:
02:dc:9d:17:02:85:28:6d:4a:49:03:e9:9d:54:95:c0:c1:e0:
d3:6e:85:8a:6b:59:b0:30:e1:8c:a3:19:43:cc:05:f9:07:7c:
cb:f3:7f:49:c9:4f:07:f2:ef:3e:1c:9a:24:9c:ed:37:a5:83:
ea:d5:87:c6:26:f2:b9:d7:0d:e5:cc:60:b2:6c:bd:be:b7:5d:
9a:68:22:ba:75:e9:a5:0b:14:40:c3:5d:6f:f0:17:7f:54:f0:
18:3f:d2:8b:61:bc:15:fa:d0:40:2c:dc:d9:ec:e2:f8:57:16:
9c:91:0c:ba:ad:13:67:9a:97:d2:aa:c1:33:19:c3:96:b3:95:
f6:03:cc:86:e2:ab:9f:20:d8:2f:ec:16:d5:f1:65:f0:a9:32:
f3:fa:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:07 2025 by rpki-client