Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: Qa+rccxI0mBaLPgESTZOERVlJXCvVnfYKG9RCS8XJVI=
Subject key identifier: 2C:10:E5:CE:34:BC:D8:11:C3:BF:00:F1:04:AF:68:B4:A9:2B:2A:F9
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 0194BD4E6751A21D48F60AD8EA5FC82E04F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 0F2D
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: Q6iUQ0DYfHMdyJe6qYUBME95awmLIrML247Kj+83woc=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:67:51:a2:1d:48:f6:0a:d8:ea:5f:c8:2e:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=2c10e5ce34bcd811c3bf00f104af68b4a92b2af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:a1:76:b2:51:4f:7e:58:a4:e2:89:9f:67:
c0:10:0e:3c:b6:d4:c0:d9:4f:24:bd:7f:dd:f2:2a:
2c:38:8e:ec:43:2c:b7:7c:23:54:8d:42:65:43:1c:
d6:a6:e9:33:37:ad:8d:97:76:52:07:8a:83:9a:4d:
8a:81:7a:8f:7e:09:0c:3b:83:3e:84:b3:26:39:08:
e2:89:03:2f:b3:1c:2c:bc:a1:fc:b7:da:70:35:b1:
96:a3:df:15:62:d8:17:bf:57:d3:5b:ff:ca:ea:0b:
7c:c0:40:d8:16:1e:a0:31:0f:2f:89:58:83:63:11:
66:14:0a:9b:eb:30:b8:72:04:fd:5b:05:71:27:d2:
47:03:80:ff:20:95:33:1c:c1:4a:50:8d:3f:b3:ba:
10:8c:2d:43:b0:0f:98:34:54:70:6c:d4:4b:7c:d8:
e4:fa:a4:ff:44:34:e0:6e:c1:0c:85:27:10:dd:82:
f0:1e:4f:a1:b9:fe:be:ed:6e:09:e0:67:3c:2c:87:
31:fb:7b:5f:1e:ba:19:7d:c2:ea:45:52:ba:4b:40:
0a:3c:e2:ee:46:cb:43:c0:19:73:06:54:89:1e:2d:
c4:a0:8e:6b:e4:0a:5d:72:bf:39:33:73:d4:5b:9f:
a4:ac:5b:4e:f5:70:74:e0:e7:6d:42:31:78:52:78:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:E5:CE:34:BC:D8:11:C3:BF:00:F1:04:AF:68:B4:A9:2B:2A:F9
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:29:e3:c2:bf:96:4f:9f:d1:a8:2f:ca:61:59:d0:58:5f:d7:
8c:99:95:3a:7c:e2:a1:01:ba:c2:1b:a8:30:55:4a:39:0f:e2:
43:4c:c0:7d:ff:e6:d7:7e:7e:7b:e9:db:ff:ed:86:f9:65:b7:
2c:77:32:2d:af:26:ae:67:fa:40:b9:2a:01:73:67:9e:34:32:
ad:cb:9b:3f:9b:d0:1e:89:c1:27:a3:e6:a9:a1:91:26:b1:84:
75:2e:c9:4b:25:1e:57:a6:ab:51:03:fe:82:6d:72:11:1f:4c:
9f:f4:97:7a:fb:ff:01:b4:83:65:41:e5:88:44:ee:fc:aa:16:
51:90:24:ca:f2:67:76:04:5e:f3:b7:34:68:05:3f:54:58:c9:
7d:85:97:fb:a7:fd:1b:6f:98:fd:83:06:ed:15:a3:75:4a:f7:
3e:21:24:08:50:49:f4:d3:92:6d:d3:6c:78:75:f7:3d:80:9a:
dd:eb:22:17:7b:eb:41:d0:85:10:0a:86:a1:cc:ab:1a:86:2a:
a9:78:66:58:72:40:9a:56:29:d5:cb:2c:4b:20:1e:88:4d:db:
12:f2:8e:63:ca:e0:34:0d:f9:1f:fe:12:eb:bc:25:b3:9b:31:
ab:74:61:43:76:5b:64:9d:ad:0a:4e:5b:f2:76:ca:40:31:59:
41:17:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:58 2025 by rpki-client