Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: z3yzzPcq/8Z9+L2yUfBlO/t0I+V+TwEeDsxnyYI3kSM=
Subject key identifier: 1B:50:7F:1E:91:6A:C1:17:89:19:D3:B9:D3:38:B0:31:6E:70:58:08
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 0194BD17778848F3B05E8331C7C4E572E2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 0D5E
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: F1APdbf1/xZc9UdpzbiMzAQNQp9cww4MpXihsLT+OJE=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:77:88:48:f3:b0:5e:83:31:c7:c4:e5:72:e2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=1b507f1e916ac1178919d3b9d338b0316e705808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:87:cf:7f:85:1a:d8:a4:3d:6f:47:01:64:
b9:9f:c5:42:2c:4f:96:12:6c:1f:2a:3c:d5:26:c2:
29:43:39:18:3c:b4:82:29:c5:92:4e:44:7d:90:88:
78:28:f4:36:62:a8:4b:9f:4e:8a:94:4d:0b:fb:14:
36:f1:66:27:be:f1:4d:13:97:66:ea:77:73:dd:af:
e1:79:33:45:53:e8:ff:25:ce:fb:70:04:bd:1b:c5:
38:93:73:1d:04:6b:af:99:99:8d:c5:3e:eb:93:2c:
08:18:19:ec:2c:4e:ff:40:aa:9d:c6:0d:b7:2c:e8:
b4:a6:76:4d:d2:ea:4b:81:20:9c:e2:c2:c7:be:5f:
bb:02:9e:e4:9a:ab:ea:e7:64:2d:27:64:e4:9c:cb:
87:fd:1b:2c:9c:43:1b:74:11:cc:3b:f0:b6:2e:ad:
01:7d:20:c3:f3:47:b8:e8:63:2d:dc:24:0a:17:0c:
5e:67:b6:a2:c7:68:09:38:df:4a:e4:b1:0e:9d:3f:
6a:f4:8b:b0:55:c0:d8:85:9c:6e:a3:8b:6c:51:53:
2a:d5:d3:36:78:d5:1a:3d:88:88:d2:02:26:fd:30:
26:64:8d:09:0b:7b:38:e4:49:03:5b:bc:66:5f:ab:
37:86:c4:5b:66:de:e8:5a:45:26:e2:f3:a3:0b:a8:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:50:7F:1E:91:6A:C1:17:89:19:D3:B9:D3:38:B0:31:6E:70:58:08
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:29:11:ac:f6:ac:4f:2e:a1:fc:db:24:88:af:20:b2:68:76:
aa:09:af:c5:e3:93:af:6f:45:92:36:3f:08:46:00:34:29:e4:
96:a2:2a:71:a4:6f:10:42:b8:34:e3:91:8a:48:e5:de:01:f8:
b5:cd:d8:02:95:66:bc:24:cf:be:4e:f5:56:b8:30:26:82:a9:
ad:77:4b:36:8e:11:5f:9b:82:5b:d0:10:db:f9:5b:57:cf:d0:
23:bc:da:72:cb:58:02:69:fb:02:47:75:b2:02:e1:5a:d0:48:
fb:34:e2:df:b6:6b:e1:89:62:4f:48:14:2a:62:bd:ef:d3:33:
37:ab:14:fb:c8:cc:4c:ed:a5:77:ff:f1:7a:f8:db:f4:73:2e:
d2:63:30:98:72:30:63:d4:7f:eb:04:11:f4:27:45:e0:ae:62:
ad:f6:bf:00:9d:8d:bc:53:79:b0:fd:e9:61:02:e6:5f:f1:6b:
a4:b0:9e:00:f4:3f:3d:ae:75:0e:f2:dd:47:35:be:85:25:bc:
b5:9c:1c:35:25:ef:cd:30:e6:73:e6:30:02:c0:01:43:b1:7c:
22:85:ba:86:66:88:aa:c7:9d:d9:88:96:84:20:22:6f:50:85:
b2:02:c5:97:c8:04:e6:f0:77:2e:5b:14:e8:de:b9:8c:2f:4c:
d2:16:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client