Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: P5pp1Gw5/wlZ4L8PdGv9Fv06XUO1rpwOuf6XBPaEEYc=
Subject key identifier: 80:DE:0A:8C:E5:DD:FF:C7:E3:9E:31:CC:81:0B:C9:3B:90:05:24:96
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 0194BC04A7836A722C0FABBCAE61327ACCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 074B
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: pwvNtnEisxtIHeDwQQOBiR4PNQudpNzrKfBt3V4LHrg=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a7:83:6a:72:2c:0f:ab:bc:ae:61:32:7a:cc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=80de0a8ce5ddffc7e39e31cc810bc93b90052496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:05:42:2e:41:03:88:87:38:6e:24:d5:cf:
b8:e6:cc:8e:82:5e:f8:1c:3a:00:ee:0d:26:18:58:
c5:5b:86:c1:16:2d:3a:bd:70:3a:a7:ff:69:70:9e:
a7:e1:a6:2b:c7:c9:16:36:4d:23:b0:1c:09:ef:1a:
fe:b9:3d:da:16:c3:0c:db:8f:59:44:30:fd:cd:68:
37:d9:58:09:d4:c7:fc:80:2d:17:f0:f3:0d:1e:f6:
ab:cb:31:28:a7:bf:79:5d:ef:e7:99:55:27:2c:d5:
e5:f2:9f:b3:6a:64:00:d2:f4:c0:08:b7:ef:10:34:
9e:80:94:25:f0:32:f5:a0:95:60:bc:16:e2:dc:a5:
87:ac:2f:06:9c:d0:c1:d7:f3:b9:e8:c9:45:ab:ab:
19:71:a7:f3:87:a2:f8:73:81:83:37:46:ff:51:7f:
cc:85:59:1b:eb:e0:1e:40:74:03:41:50:e8:56:21:
28:18:30:77:1b:62:1c:50:2a:2d:8d:3b:d2:48:fb:
9b:01:1c:7d:d2:7b:25:10:a9:03:f9:aa:6a:0e:5f:
eb:6a:df:22:9a:2a:f3:89:80:d2:ef:38:80:18:6d:
bd:a9:fc:c9:56:4e:ff:84:89:e9:b4:e0:70:a6:70:
75:fe:1a:89:da:2b:05:9d:a9:56:6d:06:67:6c:14:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:0A:8C:E5:DD:FF:C7:E3:9E:31:CC:81:0B:C9:3B:90:05:24:96
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e8:11:e4:73:e6:1c:88:e8:dc:a3:e1:77:b5:c1:0a:95:ea:
f6:c0:43:72:78:11:de:14:21:66:08:d2:e6:fc:5f:5e:18:34:
cd:17:26:72:2a:7a:86:1b:db:bf:f5:ae:1a:9b:29:8e:b6:0b:
55:d3:aa:06:9e:f9:65:64:3a:45:77:da:b1:53:f1:a6:5a:39:
64:d1:2a:83:b3:97:89:d8:e9:7d:da:cd:ba:b5:32:89:d0:69:
6b:44:1d:f9:8c:63:77:c9:d3:90:e9:ba:6b:d6:eb:2d:69:9b:
23:2d:4f:92:84:46:7b:36:f2:18:9e:2e:fd:b8:44:56:a1:b7:
07:c3:81:85:6e:2d:3c:12:38:2a:17:b1:10:6d:06:31:10:f6:
72:26:ae:07:97:62:f8:b4:a1:d8:ef:f3:7e:c8:17:1f:10:7f:
4d:73:c0:88:c2:e1:3e:ba:89:5d:52:e4:35:55:79:c8:53:9b:
83:07:a7:23:43:08:32:62:5f:ae:42:15:62:c4:fe:9c:28:a6:
07:d1:86:b0:6e:e0:84:41:39:b0:6a:20:1c:1f:71:e3:f9:8b:
54:1c:9d:34:5e:74:30:8c:1c:e0:35:d9:69:7e:fb:a1:57:77:
10:f1:a5:b6:7a:f1:f9:7c:d7:05:bd:cd:c7:a4:0f:96:da:3b:
f8:a4:c9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:25 2025 by rpki-client