Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: DKxTk6PhKAkpS95Q4PLTYVA5n20+UvakPbPcZyPyYzA=
Subject key identifier: D9:74:2A:1F:F0:A4:F5:6B:13:49:58:09:DB:92:5F:D8:4D:E5:B3:DD
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 0194BD18020D84030FE7AF8EC8381EBC1C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: 4LcYhh5VaoxzE7_TrJsxLDfGQFw.roa (hash: Cn7+k3SprfzaNho3028EBV81uHShItHvR2vBO+BWN4A=)
2: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: e14KwUXoqkLGKQ5u/hiaXXQv7RS/EKaNPqNmZf7SGAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:02:0d:84:03:0f:e7:af:8e:c8:38:1e:bc:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=d9742a1ff0a4f56b13495809db925fd84de5b3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:4d:72:80:69:c5:18:91:1e:d8:db:ad:4f:
67:29:f5:36:1d:d2:94:a6:5d:81:9a:65:07:32:84:
bf:75:bf:83:7b:5b:c8:9d:2d:3e:20:f4:64:de:49:
f0:b5:a3:e1:ad:0f:8f:a3:e6:e6:1c:ba:5d:a9:a4:
23:02:3a:99:16:70:ba:20:58:2e:9d:e0:57:c6:f0:
19:1c:ff:b9:91:df:a3:c0:55:ca:b1:17:b8:5d:33:
ed:2b:15:3d:83:16:f8:d3:43:0c:66:f2:74:b2:c3:
1a:fe:b6:30:d1:e4:ae:c5:2c:ec:64:f9:7d:a5:29:
7a:96:cf:7d:84:b6:df:3d:7b:4f:89:5a:6d:b8:7d:
0b:06:d0:71:d0:22:9c:e4:78:a6:47:53:56:4c:3e:
12:53:30:f4:5e:54:77:77:85:fa:7d:71:b3:78:37:
5c:02:84:f2:b5:fb:6b:b2:63:4a:6a:03:21:f0:2d:
77:7f:de:5e:a5:69:19:96:49:9c:b4:6e:cb:fa:81:
3b:b5:3e:3a:b5:26:9f:22:55:5c:a0:18:e3:2f:5d:
99:71:cc:e9:98:c9:97:e7:9f:d9:9c:33:1c:f5:c6:
cc:ca:52:9a:08:48:76:b6:ea:ff:85:e5:2f:69:b7:
33:77:73:13:f7:2c:ba:de:b0:fd:49:ec:7b:b0:60:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:2A:1F:F0:A4:F5:6B:13:49:58:09:DB:92:5F:D8:4D:E5:B3:DD
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:a2:01:f6:95:4b:71:61:cb:47:f2:ad:3c:63:b2:44:d9:
c5:19:1c:6f:95:b2:d8:59:46:85:40:de:b2:d8:4f:63:20:37:
f0:ec:d5:d5:eb:02:be:65:f8:2e:24:7b:ed:f8:10:e6:ea:0d:
0a:b2:70:04:03:15:99:44:c3:4e:02:0e:1e:23:a6:d9:f4:f6:
9b:49:61:9d:fb:bc:9a:3a:cb:e1:2f:11:36:49:b8:80:68:d9:
64:fa:ff:d3:7d:6d:af:c3:2b:eb:90:6e:29:22:88:2c:59:04:
72:38:7e:8f:fe:8c:42:fb:35:d4:81:ff:c5:5f:25:88:13:ae:
d4:73:2d:34:72:77:46:19:01:ae:4d:6b:1e:70:88:b6:5f:9c:
fd:da:16:c5:93:1b:ac:b8:61:27:12:7d:fe:e2:4e:2c:c6:ec:
56:9e:d2:88:3b:7f:ea:1b:48:24:48:81:b4:01:84:e4:e4:54:
08:35:63:6d:9e:ad:2f:9b:ea:92:03:20:56:5e:b3:bd:0c:c8:
34:f2:0b:5a:86:b5:bb:91:3d:99:a8:21:bd:d2:c5:f6:86:6b:
d3:50:60:20:a8:e5:cf:73:46:bb:13:ba:dc:82:20:8f:eb:da:
fe:86:6a:18:d5:63:5f:24:f3:c0:cc:1e:ce:55:51:3b:65:92:
e1:54:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:23 2025 by rpki-client