Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: 5jsGYWNjoVZPBDk7xyQU1Zo6gY52wM4o5ebW0i7wUxY=
Subject key identifier: 51:13:66:AC:AA:4D:75:31:C9:84:20:32:44:E3:A7:48:BD:79:24:39
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 0194BCE06FA895319424FDAE925D3ABF8D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: uOTt09Hm5vQCLDfqUvPwt4xjYCq2RJ7ARAkaM4Vkk2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6f:a8:95:31:94:24:fd:ae:92:5d:3a:bf:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=511366acaa4d7531c984203244e3a748bd792439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:58:f2:78:d2:95:fe:ea:d7:0d:f3:2b:b6:
dd:e0:3a:61:0b:f2:11:98:a4:cc:1c:05:bd:67:2f:
65:d4:ad:23:50:66:ed:e6:1c:67:9a:3d:7c:8d:8a:
ec:57:a7:24:9d:29:c3:c3:ea:55:cc:87:7c:70:fd:
6c:b9:fb:72:74:af:45:be:53:60:ad:9d:1a:b7:3b:
60:5f:fe:dc:dd:a6:72:25:70:70:1e:50:61:e6:a3:
57:1a:bb:4a:91:96:8b:b2:a2:f1:4c:7c:81:de:a0:
30:76:1f:98:66:67:49:81:f7:43:4b:1d:41:bc:a6:
ae:29:82:17:44:33:0a:18:ee:2e:ac:b6:fa:ca:bd:
48:d0:0e:ba:ef:1f:cd:d3:fe:c5:7c:f1:ab:6b:15:
87:2a:07:44:ed:63:85:fa:d7:cb:49:71:09:4f:a3:
fa:c6:de:3f:dd:88:fe:df:06:a5:25:ef:a2:8b:67:
81:f1:d3:93:8e:80:ba:c9:31:cb:80:6f:41:17:7d:
90:ea:74:0b:09:1b:ce:de:b9:a4:86:1a:66:73:30:
bc:8a:52:bf:cb:20:c9:4b:c0:f3:97:f9:66:24:c3:
d5:9b:31:45:05:d6:bc:15:8a:24:e7:a9:a6:79:fd:
e2:ac:67:43:47:cb:26:78:8d:9e:27:3d:ca:b8:5d:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:66:AC:AA:4D:75:31:C9:84:20:32:44:E3:A7:48:BD:79:24:39
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:d9:0e:2d:99:07:c2:a9:a1:97:79:f5:df:42:2e:8b:f7:
22:f0:0d:7e:04:34:2e:b2:73:18:1e:bd:f6:d5:85:a1:86:8b:
ee:88:ca:e0:0b:20:6f:df:8c:97:a5:0c:04:3a:8b:e3:f0:13:
e9:79:74:b0:89:ec:ad:d1:72:9a:8e:fb:4d:b8:9f:82:d7:d5:
93:06:2c:4f:59:c6:cb:84:53:3b:a6:75:80:6a:3d:65:87:c8:
40:34:14:0e:a6:77:2d:be:4d:8c:4a:b1:c4:85:be:37:88:b3:
bf:db:02:78:36:d6:62:48:8d:81:84:b5:e1:28:cd:ff:c8:15:
82:a7:67:3f:81:97:69:22:6b:dd:b4:d7:62:a6:08:1c:f5:1d:
5b:0b:95:87:1c:32:a2:23:c0:54:cf:8b:08:bd:01:3f:d7:23:
7d:5a:21:2c:36:c4:a3:11:be:29:c6:b8:39:85:5f:65:b4:98:
ba:a0:fc:e2:31:8c:1e:c1:30:24:a7:3f:60:68:42:13:9c:31:
14:50:20:da:f4:ff:ae:05:0e:f6:e2:d2:47:81:ea:e4:0b:1b:
9d:8c:0c:22:5a:81:cd:f7:0e:18:71:d5:ab:2b:2e:ee:d7:41:
aa:9c:17:fc:27:b6:cb:66:4c:ad:5d:9e:53:c9:63:a1:3b:0e:
b4:97:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client