Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: 2RXJVPcRDgS7xVA0zpw/anb5vsPwGX66kjnTftRfbZY=
Subject key identifier: 82:96:10:DC:3D:26:A8:EE:99:06:22:5A:2F:DB:D4:76:0B:D7:EB:3C
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0194BC3C8D97927F1B7FD9F0D52A4125EAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0438
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: MbrOA67KXP5Sof4KyxzKW8ZUEu4eyRQh4muvoAHwwFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8d:97:92:7f:1b:7f:d9:f0:d5:2a:41:25:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=829610dc3d26a8ee9906225a2fdbd4760bd7eb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:5d:2b:2e:4d:e3:68:97:35:9c:87:f3:0f:
03:fe:8c:03:b3:79:46:3c:d1:c2:14:ad:63:10:c2:
a0:09:08:e5:c0:2c:67:11:67:28:66:02:63:8e:69:
25:d6:e7:a7:41:73:00:0c:d2:0b:f7:3c:55:e7:e0:
e6:02:17:ea:9f:6a:ac:ef:b7:bd:24:b9:0c:d0:2a:
71:b3:b3:f9:e0:f8:f1:19:06:4f:e4:e6:09:f9:94:
5c:33:75:5a:b9:d4:dd:a6:23:ee:8e:85:82:6c:70:
73:64:a0:a4:b3:9d:8b:46:db:cb:9f:9d:68:05:dd:
81:30:c1:6a:08:9e:f4:b5:f6:79:cf:e6:89:6d:35:
10:ee:46:12:b0:9f:0a:b3:d9:f0:e9:b1:9b:d7:c0:
4d:d2:b6:e3:f4:7f:03:d0:2d:c3:77:d2:5e:b9:5b:
4c:15:23:60:d7:08:36:50:63:e3:44:10:13:f3:88:
60:e9:33:d2:26:f8:55:3e:ca:28:1c:cc:91:e3:00:
00:64:6b:98:90:de:7e:d3:8b:03:30:32:9a:35:94:
28:74:45:f0:06:4b:c9:f6:09:ba:b7:4f:da:74:50:
e9:86:ed:76:85:e7:11:45:5e:99:3a:16:10:36:a4:
e5:c4:00:93:5c:bb:24:68:67:41:40:d5:1c:3b:b5:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:10:DC:3D:26:A8:EE:99:06:22:5A:2F:DB:D4:76:0B:D7:EB:3C
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4e:f0:29:97:2d:75:06:2a:36:4b:fb:9d:e3:5c:5c:10:c9:
bb:e1:78:56:3f:da:eb:48:f8:80:43:cd:2b:c8:41:eb:1a:c0:
57:19:7a:2a:50:5f:29:54:9a:b5:a9:c1:9e:25:fe:c6:4c:bd:
09:20:fe:6a:64:4a:5c:4d:a0:9c:c8:86:72:52:55:bd:a1:44:
f5:bc:06:88:30:95:cf:8a:d8:d6:7e:ab:66:ff:ab:84:e4:48:
f1:2a:f2:de:20:d2:e2:99:0b:e1:e6:a4:37:fa:92:f3:fb:5e:
82:6d:84:a5:4c:69:a4:09:02:5f:78:8d:45:8a:4e:ff:fe:68:
11:4f:de:d4:b9:cf:60:11:98:f6:7c:56:67:e4:4d:cd:c0:0b:
99:5d:ae:ac:be:90:7b:c7:cb:d2:52:fc:87:81:79:69:d9:df:
46:6e:e7:11:d8:20:d0:2f:64:63:d1:39:7f:a6:89:e0:86:fb:
c8:a8:84:96:02:52:6b:27:07:e9:75:cc:c2:9b:03:3f:b9:4e:
d5:c4:82:be:80:10:4e:5d:02:38:5f:85:14:31:cc:ab:60:51:
4a:9c:1e:88:00:94:a7:21:97:ab:1b:51:47:07:be:1b:d0:a1:
65:16:48:fd:f7:1f:ff:d4:9d:13:47:cd:3c:0a:ae:72:94:1d:
e3:a4:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:24 2025 by rpki-client