Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: toH8dgX/70+Sb0EL7h2QYDx40FWVvm+iDQhN1P94+gU=
Subject key identifier: 5D:59:0E:AC:E1:BF:E2:E2:09:79:27:3E:12:EF:DA:7E:E3:28:3A:5D
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0194BC3CA2A44D6E211BB2C5C0712A7A2D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 9UwwobBOpWlFKxqTwCE9qW-44nY.roa (hash: H0L6+IhqW6oM8MbDAghdoxxD9IJyKJEdC3/lOqu3vi0=)
2: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: zbK3shTkwlVE/PqPmMdKEKM2wDYUBiNhHYUKjbcvY7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:a4:4d:6e:21:1b:b2:c5:c0:71:2a:7a:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=5d590eace1bfe2e20979273e12efda7ee3283a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:dd:14:1f:5c:d2:76:d7:9f:24:e1:29:0e:
a6:56:03:9c:8b:56:0c:ab:ae:b4:8c:41:a5:f2:a8:
1c:8e:41:81:aa:b1:97:88:80:e0:d5:d8:2e:6e:ab:
b1:91:6e:19:16:df:9c:6c:81:66:95:32:fd:be:6d:
c0:d1:d2:56:cb:84:28:ff:da:fb:3c:16:b2:34:a8:
a0:13:51:04:ef:a1:0d:ae:26:44:79:ba:d3:bd:f9:
29:e6:c2:d6:5f:61:9b:ea:df:05:dd:e5:c5:4f:a7:
27:4b:b7:72:6e:24:2f:d9:c7:95:98:b9:52:cf:d4:
0d:84:b8:71:72:7d:4f:b0:d3:30:c8:41:25:6a:e9:
b6:31:db:a8:1d:b7:19:82:22:63:82:44:64:20:77:
d2:9c:e3:17:0d:97:00:97:b7:1b:41:f2:fc:64:c7:
39:ff:c0:aa:52:23:56:45:a7:09:fa:47:83:39:2a:
a2:cc:a7:fd:ec:a0:6c:c4:9d:26:29:36:f9:8b:85:
58:1e:45:fa:46:2f:55:93:73:8f:8a:54:dd:f5:97:
5e:79:f7:78:e4:ea:46:7e:8c:79:b3:dd:3c:bf:cd:
90:3d:ef:4b:27:a7:9b:36:fa:1c:63:d3:df:89:f6:
b4:6f:5a:48:7e:33:e7:15:51:24:42:95:e2:54:3b:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:0E:AC:E1:BF:E2:E2:09:79:27:3E:12:EF:DA:7E:E3:28:3A:5D
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:00:21:a2:42:a8:89:d6:6d:94:5e:c0:b6:35:8a:bb:56:d2:
fc:62:27:14:d3:c3:d1:76:a7:21:76:e4:c8:16:e9:bd:06:e1:
55:3c:fe:48:48:c6:18:a9:c5:be:ae:89:a7:e8:b4:f8:0d:0d:
47:9d:2b:b1:7a:e2:7a:53:14:00:2f:82:56:77:68:b5:4c:10:
5d:6e:c5:e8:ab:54:e5:c9:f5:8d:e3:dd:bc:53:e9:6e:0e:d3:
d5:ab:10:0b:e7:9d:7c:3f:1a:ab:a9:c1:ec:4d:c4:4f:55:18:
6c:fc:1b:e3:04:1a:52:3c:97:cf:20:51:8d:9c:a6:e1:17:29:
0f:6c:39:bf:49:02:d5:ed:dc:40:3c:b3:04:8f:02:b5:c5:f3:
04:56:ea:59:9e:d8:2f:f5:b7:8c:df:6e:df:f2:ca:6d:5a:b7:
b7:98:e6:99:01:5f:08:f9:c7:b8:0f:9b:bd:b1:f2:47:0e:ba:
2f:00:80:15:8f:cc:32:f9:e3:d3:97:3c:33:c7:25:a9:ff:8e:
11:47:e6:f5:14:9e:e6:a6:46:b5:97:34:d0:c1:64:d2:2b:fa:
60:12:40:b4:76:ae:b9:62:ed:fe:2a:ed:85:5c:45:5c:c4:a7:
17:58:5b:66:aa:f6:04:66:b3:89:75:0f:19:03:c0:19:6c:0b:
80:ce:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:03 2025 by rpki-client