
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: F9MmRAdHoH/BkB7ifyOnB1dVN3fRORRgktCw4jMycRM=
Subject key identifier: C6:3A:62:3E:DC:62:B8:A2:14:C1:C2:3E:46:1D:A2:58:F3:DE:6B:C8
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0194BCE05B9BA0F6DA47F1F352C3EB6C4E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: XrR5vCiI+EOBm3opEs+1r0rJnG3Yuk95WSfA+jz3RMQ=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5b:9b:a0:f6:da:47:f1:f3:52:c3:eb:6c:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=c63a623edc62b8a214c1c23e461da258f3de6bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:41:85:d3:b9:9e:99:21:df:e4:3c:b8:3e:
9f:27:48:e3:21:45:2e:b0:47:1b:d7:a6:a9:84:9f:
7b:28:f8:75:d2:db:2b:fa:51:97:f4:d2:c9:a9:6f:
90:0c:e3:47:a4:1b:7a:6d:d0:0a:52:fa:27:70:f4:
65:44:9e:e0:7b:6f:37:47:f5:a5:b7:e3:b7:8c:0a:
8a:a3:40:bb:5f:53:fe:1c:7d:ae:de:08:7e:e4:6a:
c1:ee:48:07:99:7d:68:90:dd:49:e9:9f:2a:f2:5d:
00:28:9c:20:f9:e5:0c:0a:4b:e0:30:03:32:f8:de:
73:e0:14:c7:ae:f8:aa:5d:71:35:eb:0f:70:22:06:
17:d1:39:61:06:33:a9:02:e7:07:45:47:4f:0b:cb:
7c:ff:ff:e5:11:05:ab:da:f1:6a:c3:ad:bf:ab:6a:
e5:a5:ce:01:b3:6e:b1:55:e0:3d:e2:a8:b1:1b:f7:
64:06:df:31:16:56:94:eb:51:d3:5f:eb:29:56:d9:
d2:36:0e:40:cf:d3:20:bb:80:e8:5e:11:18:5a:cc:
57:49:ae:be:a6:65:ef:e3:51:86:4b:30:35:13:92:
e2:6b:a4:bc:54:4b:e7:45:f1:a5:2c:3b:ee:c2:c8:
d2:6a:66:0c:f2:c7:4e:0d:66:33:d5:72:fd:08:81:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:62:3E:DC:62:B8:A2:14:C1:C2:3E:46:1D:A2:58:F3:DE:6B:C8
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:92:ce:f9:aa:4e:35:6b:b1:64:98:50:30:11:69:09:37:
11:e5:23:3c:b0:62:b0:fd:41:c0:2f:7d:cc:bc:b5:2d:ba:36:
87:a0:4f:58:90:d5:d7:b1:de:bf:3f:aa:45:7e:e5:d2:72:b7:
11:36:d8:1a:d6:cb:af:c5:c7:3b:f9:d4:0d:7e:65:29:71:60:
41:08:5e:fb:e8:50:78:8f:76:65:08:7a:e8:09:4b:fc:70:3e:
ea:8b:5b:79:79:90:2e:62:08:09:6f:27:22:f7:ff:b2:54:6d:
d9:24:47:9a:57:97:46:6b:77:21:39:77:2d:67:c1:41:ad:84:
e4:2d:1b:5f:78:41:ff:a3:84:09:ff:fc:69:81:c2:73:30:1d:
20:ee:16:e0:b5:fb:58:8e:17:c5:47:43:1a:0d:c0:76:49:ef:
85:c5:15:ab:14:d0:82:09:96:43:87:5e:8d:e7:20:bb:0f:17:
57:7e:03:1b:2a:c1:a0:db:ce:cf:96:bf:52:17:a2:d1:b1:e1:
19:b5:1f:62:22:d4:79:71:b9:96:36:16:36:3e:35:2b:d3:1a:
9b:12:31:a9:a6:6d:9a:b3:89:e4:bc:c8:9f:4d:e9:f6:51:f3:
3a:73:f4:e4:8c:99:f5:b3:99:6a:04:ae:65:e4:2f:a0:07:fc:
0c:d4:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:37 2025 by rpki-client