Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: SAghLyfeyXw1RwTv1XNbmrij7UGhWaNVGbq3rESlKOE=
Subject key identifier: 93:DE:2B:8A:57:48:9B:CF:BB:82:54:46:1D:BA:C4:53:29:35:7D:C3
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0194BD855F37955AE64A4E7C5A9BAD721339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: 3yfENG3FrU/RnvdY3K7NEP1fPmCUOHKLoq7Nsws1Ha8=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:37:95:5a:e6:4a:4e:7c:5a:9b:ad:72:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=93de2b8a57489bcfbb8254461dbac45329357dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:ee:e7:59:37:43:c0:ff:f0:67:57:c3:b1:
11:26:ae:b7:2c:b5:eb:af:3d:11:72:4d:7a:7a:00:
90:1d:33:ee:dc:33:a6:6c:23:a1:a7:66:48:e8:21:
c3:a3:5e:a3:25:11:1a:ea:4c:a5:ed:07:7e:b5:b3:
ec:fe:39:03:c2:81:d9:10:27:44:91:f0:ee:a4:88:
ae:c1:50:bf:39:77:f2:7e:8e:58:e9:73:5f:5e:95:
39:64:7f:a3:fc:c2:f9:84:1e:dd:21:82:1f:89:92:
07:de:7b:a4:40:f6:8b:45:bf:79:43:e1:ed:da:66:
3a:05:43:3d:bf:6c:d4:0e:ac:71:20:5b:d7:8a:52:
a6:63:e5:a5:1e:3e:f4:1b:ae:48:b7:5f:58:5d:af:
f0:77:5c:ec:b3:c9:bf:b7:6c:4f:7a:00:7c:98:07:
67:9e:2f:8f:d4:9d:a9:ab:48:72:1d:38:bd:99:0b:
4d:08:ba:ad:3a:53:d4:96:7f:5c:32:4f:08:0e:ed:
0c:51:f8:31:eb:6c:40:df:0b:00:8f:95:4b:09:03:
13:d7:98:78:3b:ac:57:e6:71:93:00:d9:57:db:16:
7a:6e:17:2c:55:91:ce:85:9f:c4:83:eb:44:28:d7:
11:4f:d1:05:ef:21:88:e5:84:19:05:18:d3:3f:9c:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:2B:8A:57:48:9B:CF:BB:82:54:46:1D:BA:C4:53:29:35:7D:C3
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:bc:26:af:a2:c0:ba:03:19:23:df:03:0b:71:4d:47:eb:
78:17:5f:1f:d3:87:e1:d9:50:bc:eb:1f:25:35:46:d4:94:a1:
27:8f:dd:48:b8:82:f1:ba:99:7f:a7:26:81:38:45:4b:70:92:
6b:88:fb:4d:0b:d4:d2:68:56:87:31:e1:fb:90:1b:2c:a0:e1:
4a:e5:85:ad:1f:5c:d6:89:36:b2:7e:82:11:8b:9a:ed:57:70:
85:43:d0:0d:f5:1f:23:de:35:51:33:7c:fd:96:b6:93:f4:21:
2c:fd:1b:6b:33:69:37:26:07:1a:a5:be:7a:98:d4:ed:ed:79:
81:5a:eb:fd:c7:21:55:d2:69:4c:0d:2e:0e:04:ea:85:89:5c:
82:58:4a:2c:0c:06:4e:ca:d0:15:44:00:57:51:1a:d1:5b:11:
0c:f9:c8:ec:c7:f4:0e:45:11:ae:75:0c:16:9b:af:76:95:48:
7c:cb:1d:f9:21:32:28:a9:bf:ea:95:08:c1:eb:9c:b2:fe:cd:
a1:88:8a:f1:d0:ad:47:b6:ee:00:82:ac:56:e6:7a:db:eb:59:
4a:5f:78:e1:27:84:b9:43:5f:03:ff:29:88:e2:59:16:a1:d4:
b3:a3:9d:e1:01:7f:94:dd:7e:2e:18:be:83:9a:15:8a:17:4f:
0e:d3:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client