Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: FBmD6+/OSSeDGtOUrau1pa5VbIAcD8tS5JAeMDCCD2Q=
Subject key identifier: 68:FB:1D:BB:C6:15:A2:23:F0:B1:29:27:59:EE:E3:AB:37:73:F4:5F
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 0194BC7315A722D29A1EDD5AE7B8181C2335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 11B6
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: lqXmcY1YMJPbpOplxsYDaUuEh7eoVvCO8Njc4GADXH8=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:a7:22:d2:9a:1e:dd:5a:e7:b8:18:1c:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=68fb1dbbc615a223f0b1292759eee3ab3773f45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:10:f5:17:2f:f3:38:4e:3a:bb:f0:8b:63:
09:67:6e:db:34:2e:0b:39:5f:a5:0c:b9:81:98:02:
45:ac:77:97:ce:93:13:a5:4f:b4:ae:39:17:70:9c:
6d:cd:9e:3d:b6:30:f9:16:50:99:5e:bf:35:72:1c:
81:9e:ce:92:0a:77:ec:33:90:a2:eb:8c:5b:a7:a5:
03:1d:ee:2e:e1:24:9f:5f:70:bd:c3:74:11:ba:5e:
d0:02:36:c0:9c:1d:45:7b:d1:d6:27:96:68:68:77:
6a:c9:e5:43:68:ad:ac:8f:26:26:0a:c5:34:58:90:
e1:ba:20:81:7a:7b:b3:a6:77:f9:83:2f:c4:d6:5a:
19:df:61:67:cf:a4:14:e7:00:e6:78:f7:5c:db:62:
3c:a1:19:c8:8a:c6:86:66:3a:ad:f4:1f:cf:7e:c9:
9b:0c:82:d1:36:2a:94:bb:89:77:c2:b2:23:8a:69:
87:07:07:dd:d5:4e:ef:a3:a9:9f:fd:cb:ef:f0:f4:
45:d3:9a:d8:58:3b:c7:ea:ae:f5:1e:22:05:bc:e0:
63:93:fa:fc:74:aa:41:64:4e:bf:b2:b8:c7:d7:2c:
8c:a6:64:3b:46:6c:c4:5d:22:7f:41:a4:19:aa:c7:
15:b5:b2:04:71:58:71:59:23:9f:e9:89:c9:4b:39:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:1D:BB:C6:15:A2:23:F0:B1:29:27:59:EE:E3:AB:37:73:F4:5F
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:11:b7:29:cd:d9:dd:e9:cb:6b:77:a8:fc:e2:9e:ea:02:1c:
fa:43:1b:a2:4f:68:ba:6f:09:34:ff:14:82:39:25:03:f4:55:
28:26:a3:d8:84:75:b9:47:83:84:89:15:90:df:db:5c:cc:53:
d0:e2:31:30:dc:b4:22:c8:71:37:1b:51:f8:db:22:91:c2:f1:
bd:82:99:f0:af:76:7d:18:4b:f5:0d:60:07:c5:b3:fc:91:f8:
13:33:77:92:68:47:9c:a8:a7:38:02:b2:57:20:70:00:26:09:
94:63:2c:38:bf:f9:1c:63:a7:13:d9:52:40:ef:62:4b:fc:f3:
40:3c:6f:f2:66:e6:d8:e8:41:13:6c:f8:7f:d5:6c:ee:08:f1:
2a:4d:bb:54:8e:d4:87:1a:cc:d5:95:bd:3e:87:1c:2f:4f:bf:
de:a6:42:04:55:72:33:20:54:a0:4c:e3:4a:63:5b:b1:6b:9f:
19:64:28:e8:83:0b:ca:9e:aa:ef:d4:b9:c3:bd:1f:98:ff:28:
fc:05:1e:1e:52:35:05:b2:d4:6a:96:80:d5:8e:1c:4c:5d:62:
b7:b1:4e:0e:c8:3a:04:1e:43:6d:e3:3f:26:b5:31:ff:74:2d:
38:58:3b:2a:4c:17:da:11:25:1e:d8:b8:aa:2b:15:bc:2a:e1:
a6:0e:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:32 2025 by rpki-client