Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: ZVD+TqQSKJpBvxDzEfNeP4Z8YsTnx85dfoMJcp/J+B0=
Subject key identifier: 9B:34:3D:CE:44:9B:87:4A:1D:23:1C:55:80:D2:DF:DA:31:03:94:A4
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 0194BCAA24443212E062475CCB53402831FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: emW/wF1ed8L1YAGChEiZduLpWyopUO+u2W2oUVz7iv8=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:24:44:32:12:e0:62:47:5c:cb:53:40:28:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=9b343dce449b874a1d231c5580d2dfda310394a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:b7:db:05:d1:61:81:21:df:b1:4d:a9:60:
1f:e0:83:1e:5e:11:33:b1:16:16:2c:37:0f:1b:42:
e9:cb:8b:87:db:7b:fa:5f:9b:cf:6f:1c:3e:11:33:
3c:eb:31:9f:fc:bb:3f:f8:dd:df:8e:b7:7e:2a:08:
8b:33:0f:85:9c:26:15:a4:21:d6:82:d0:41:11:bd:
11:da:0d:a9:2c:ac:91:2f:39:a6:44:ac:c3:52:ab:
34:b4:cb:d2:8b:f4:ac:b6:8b:41:f9:88:da:80:35:
04:ab:d2:fd:09:f9:4c:f0:7d:17:f4:90:9b:29:c2:
ce:94:2f:30:39:26:2d:8a:a5:c9:0a:31:13:61:3e:
8f:6f:18:4c:0c:c9:79:e2:c7:34:12:f3:c8:2f:0f:
0c:09:1b:9c:d8:7e:5e:9c:54:ad:8c:e6:e2:78:c0:
77:4b:b8:89:eb:b3:b6:c5:87:18:e9:5e:d8:a3:9a:
6c:4c:f0:88:02:ec:19:0c:59:28:84:28:7a:28:a4:
48:fc:f6:dd:36:60:70:51:d4:25:89:d1:22:a8:e8:
06:86:32:d6:25:68:2a:95:18:d6:99:26:77:1c:c9:
f2:fa:d3:db:61:bc:0a:b8:6c:61:a7:8f:95:cc:59:
b0:9b:4d:71:ec:a6:b3:65:ff:4a:87:97:df:5e:db:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:34:3D:CE:44:9B:87:4A:1D:23:1C:55:80:D2:DF:DA:31:03:94:A4
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:77:b4:64:f0:b6:02:cb:62:11:8f:ab:93:89:f4:2c:6e:18:
b7:25:e3:75:ce:e7:5a:b1:af:14:82:a2:63:40:2c:0e:1f:2b:
c8:22:ad:1d:3a:ba:02:32:3c:be:59:00:ef:5a:b6:80:0d:5c:
a3:69:29:45:4e:ef:24:5f:17:8b:b0:7a:b0:1a:6d:6c:da:51:
98:71:97:b2:bc:c2:09:47:55:e4:48:5a:34:7b:22:06:17:94:
e1:16:cd:17:81:f4:db:e8:31:ba:7e:70:75:9c:4d:ac:a7:f3:
f6:9c:3c:35:2d:8e:8e:03:a6:3d:4b:35:6c:0f:cd:a1:18:78:
d8:1c:5d:c2:bf:96:fb:f3:fc:2c:d6:54:72:fe:1f:52:a4:59:
5e:04:49:54:11:12:22:10:ba:79:b6:52:89:30:9f:df:92:2a:
69:fc:67:46:aa:dd:bd:8f:10:78:78:01:74:49:1f:ac:09:85:
7d:d4:ad:c6:7d:4b:63:f3:98:26:37:17:fc:83:87:1e:25:3f:
74:a3:b6:e3:55:f6:3c:3c:ca:75:d4:03:95:89:89:0d:25:65:
74:70:0a:d6:ba:e3:9a:7d:d1:66:9f:e8:4b:07:b4:d8:53:20:
34:bd:7c:2b:80:f7:fb:41:ba:e9:bb:fe:b0:f9:ad:40:95:b5:
d0:12:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:51 2025 by rpki-client