Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: JWd3kQJtZCPRhWRY0+x1TDnMxjgNWbRS2y2oJoHf+lw=
Subject key identifier: 98:0F:D0:D6:1B:CB:7C:ED:7F:CC:0C:C1:A2:C3:FD:D7:E5:8D:34:CF
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0194BBCDCCE20AE78AD809A181806AFBB6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0141
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: F5XenQGb3UNB+O+BXc8yu9sHnuqJ6QVs4JFcrL66urU=)
2: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
3: flGWGJBSJRB3OVz2-AIKsyVQzhY.roa (hash: WncPIbu551wOPNYaTlkQ85WeMqd4oia5RgXgIRMMqoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:e2:0a:e7:8a:d8:09:a1:81:80:6a:fb:b6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=980fd0d61bcb7ced7fcc0cc1a2c3fdd7e58d34cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:63:a1:fd:fd:e5:e9:d6:91:54:b1:70:80:
4b:ad:ca:ef:8c:01:9c:6d:c0:65:04:bd:5c:4b:45:
6d:9c:e6:86:fe:35:67:35:29:41:e7:2d:95:4c:9a:
bd:2d:a5:ce:c5:a2:67:4d:89:02:91:c6:4a:a8:31:
62:aa:3a:49:7b:0a:ad:0d:69:ed:e1:d9:c9:46:01:
e4:63:98:9c:6f:b0:ae:34:6a:02:e1:fa:33:52:85:
d3:ff:fb:a4:f4:45:89:24:c2:38:aa:65:a9:32:2c:
9b:34:aa:9b:52:0f:46:7a:77:a2:ca:29:20:78:cd:
bf:b3:d8:9b:f6:53:82:38:fe:3f:4c:20:e3:3d:01:
ff:c8:af:d7:c7:45:47:6f:a8:f9:9d:c2:85:d2:ed:
29:50:c9:54:38:5a:a3:fa:f7:8a:3d:44:79:c5:17:
62:81:50:5b:3a:18:9e:04:25:49:6d:75:91:8a:e5:
fd:5a:da:31:49:ab:ca:c6:dc:be:36:a1:b6:6a:68:
58:0a:ad:02:43:2d:aa:f8:c5:b3:96:ca:db:28:0f:
82:e2:2c:41:a8:1d:39:dd:18:c6:92:c6:b7:b4:2c:
ad:09:d9:95:03:7b:29:63:86:e5:13:5e:40:4d:25:
8e:ba:a9:4e:f2:43:f4:f6:2c:3a:26:4e:81:b9:ba:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:D0:D6:1B:CB:7C:ED:7F:CC:0C:C1:A2:C3:FD:D7:E5:8D:34:CF
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:71:71:02:e8:e0:36:2b:0d:45:ed:eb:64:bc:90:ad:9b:81:
f9:4c:4d:bb:f7:fc:1e:78:ae:93:71:e2:2a:e2:64:7c:20:e8:
80:5c:1e:a9:e2:73:38:b9:c6:0f:27:1e:f0:ad:d2:a2:70:8e:
d0:b6:69:99:e5:8f:ae:a0:e8:40:8c:96:7b:75:25:5a:93:40:
db:6f:ed:9d:38:17:c3:ef:5e:cf:4a:2a:96:13:97:7f:1b:4f:
58:cd:13:d8:a4:d4:3d:67:92:08:bc:f3:71:2f:b8:00:cb:c1:
fb:b5:f1:1f:32:5a:18:dd:90:1c:ca:1f:47:db:4c:14:20:29:
84:e1:f7:92:6d:08:56:2c:d1:94:7d:ca:9a:1f:a9:00:22:14:
bb:78:52:86:2e:ab:9b:5d:c2:1a:78:78:26:28:e9:cf:1a:fe:
04:75:9e:fa:bc:70:0e:40:97:99:49:8b:54:45:74:6f:e2:2a:
5f:a6:9e:19:74:89:ed:c4:a3:d8:b0:56:42:b3:38:72:03:64:
ce:c0:37:24:83:d8:28:66:5f:b8:43:e8:fc:1c:0c:41:e9:f8:
90:3c:09:40:18:f8:8d:5b:bf:ef:11:0c:53:25:69:2b:5b:c8:
21:fc:c9:a3:56:15:d5:11:0d:95:fe:2a:d5:d3:35:96:61:0c:
aa:ae:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:02 2025 by rpki-client