Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: t5FEe3QPY4p3rCiaFVHPXMDadYdkxEB3QEqzLgyv4jw=
Subject key identifier: F4:2E:98:93:38:41:40:2A:8F:C8:BE:20:CD:FC:66:19:F3:E0:74:92
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 0194BCE0AE03B09FD89946A29580453CD11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0C2D
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: kAHPHl39+aIxxrbMH7YJT9dHRzIdOR0L7PNIS4zBIJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ae:03:b0:9f:d8:99:46:a2:95:80:45:3c:d1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=f42e98933841402a8fc8be20cdfc6619f3e07492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:f7:8d:d4:fe:a9:6e:1e:8f:98:34:01:1b:
53:84:7c:36:85:56:31:63:a7:10:70:09:4b:c3:6e:
e5:ca:a0:48:75:0b:c9:99:6b:11:e8:37:e7:50:04:
91:0b:34:78:60:57:6b:6c:1a:93:34:e5:fe:2d:66:
da:8c:98:d0:1c:4a:2c:a6:09:e6:ce:0a:ff:19:90:
b1:09:2c:83:a9:10:de:9e:5b:0a:b5:36:e6:16:71:
42:b0:b6:f6:62:ee:9e:28:e0:f5:41:a9:ee:e3:89:
9e:a3:98:6d:7a:23:64:7f:08:df:33:b6:73:42:9b:
dd:1d:c2:62:aa:02:cb:f8:48:14:cf:20:1b:0d:c9:
9a:88:20:e7:e3:95:b6:14:2a:c6:52:f2:68:89:7a:
97:52:b5:4d:3e:e6:69:ae:81:d6:98:55:41:d9:42:
d0:16:fa:a6:01:c7:75:b3:fe:43:ee:bd:af:9c:85:
4b:7f:39:a9:69:11:96:40:8a:a5:34:29:ab:c0:f0:
6d:37:6e:e7:a4:c3:71:2d:73:7e:d3:80:ae:b7:49:
4a:00:07:3f:20:1d:14:fa:b7:40:77:37:83:92:d1:
d1:8a:86:9c:99:55:eb:00:0b:04:d7:dc:6c:12:ac:
7a:ee:59:f2:73:f3:98:79:26:5d:50:6e:92:c1:a5:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:98:93:38:41:40:2A:8F:C8:BE:20:CD:FC:66:19:F3:E0:74:92
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9e:e2:1c:f7:f2:f2:6d:4d:ff:9e:fd:74:bd:73:dd:ea:22:
ba:a1:99:b6:1a:36:ef:e9:2e:80:83:b7:da:c0:a1:e9:e3:e6:
58:49:bc:f8:19:08:a5:e6:d2:39:b2:52:ba:70:e7:4c:cc:a3:
08:a2:e1:a7:2e:7c:13:99:26:5b:6b:0d:80:70:92:72:aa:c3:
95:37:ce:f6:e1:26:26:41:0b:2e:d2:ab:1e:c9:7e:1f:a3:66:
32:45:3a:fd:93:53:ca:3a:ee:a4:09:7a:23:12:79:80:c1:05:
15:1e:89:a2:56:19:9a:0b:37:11:2d:57:1a:89:9d:0b:b1:4f:
e6:12:2c:88:f3:95:6c:76:df:21:c7:05:b0:76:b4:0e:e0:e6:
74:8a:d0:9b:69:fc:b6:93:65:66:00:6c:0c:54:d7:fd:79:8a:
ba:7b:f1:ff:1b:29:98:13:ab:13:f4:9d:e6:f3:ca:24:17:20:
6a:8a:ab:af:b4:9c:47:ba:e9:61:d7:63:83:11:35:e0:39:16:
d0:c6:59:92:30:16:7a:1f:12:99:6c:38:1f:03:32:c3:6c:d6:
89:65:52:4f:5e:a5:26:ce:7a:2d:d3:4c:9a:02:dc:af:69:9e:
55:fd:e2:76:7c:75:c5:34:b7:fc:97:b4:56:5b:10:18:1e:be:
6f:0b:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client