Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: kgbZy6OMhkLbgcgUy9+F2Cnnm1klXrDE9MvKBKKJv/g=
Subject key identifier: 5C:02:45:4B:A1:8D:06:9A:54:F2:17:0D:40:58:76:79:0C:CB:F9:B3
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 0194BCE07B6C64C540FD659AF3F614B4511C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: 7zS6V7jIZWVb3ayZLyKveaCz86av2N7X40UbJkqb7FM=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:6c:64:c5:40:fd:65:9a:f3:f6:14:b4:51:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=5c02454ba18d069a54f2170d405876790ccbf9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:63:ef:b2:f8:c2:5b:44:01:9d:3a:d6:da:
bf:1d:ae:9d:1a:83:70:ac:9a:40:ef:02:54:d9:59:
32:6f:3a:05:4e:c8:e1:cd:04:23:63:f1:04:f5:61:
d8:af:a3:b0:6b:28:38:db:eb:96:3a:ce:c0:00:a2:
a1:ea:cc:99:33:5f:1f:27:59:18:e5:4a:26:1c:37:
f6:ab:05:02:82:9b:27:95:0b:d7:07:59:77:29:d7:
f0:7e:e4:6e:40:ab:74:3a:53:97:ba:ea:85:aa:30:
4f:94:c6:f0:1d:6c:09:50:9d:80:f5:88:f3:07:79:
4d:07:c8:98:40:93:fc:20:bf:e7:93:97:8f:fd:85:
3e:df:be:d0:64:e6:b5:11:5b:9e:c9:ee:75:60:c2:
36:70:37:8b:90:90:95:ca:14:4d:7a:f5:3e:22:67:
e3:af:68:bc:a8:59:80:43:09:56:1a:fb:75:af:a8:
da:98:32:1b:b0:19:0e:96:67:66:a7:91:36:dc:37:
39:a0:2b:c1:fe:68:24:6d:87:6b:77:0b:17:2c:1f:
49:17:ed:6a:cd:69:77:22:4c:be:76:30:5c:2f:a8:
1e:a5:07:21:1e:32:61:68:0c:6c:32:c1:bb:c7:aa:
15:49:11:dd:1f:51:5b:95:29:ee:95:36:c4:5a:10:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:45:4B:A1:8D:06:9A:54:F2:17:0D:40:58:76:79:0C:CB:F9:B3
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:9d:e6:8e:75:e4:de:d7:b5:66:c0:34:61:f5:65:53:2b:
49:85:37:37:00:74:ab:06:f1:1e:69:ad:40:5b:e2:b0:13:c6:
87:fe:47:c7:93:30:0d:c1:39:84:1f:a0:11:64:1e:74:e4:13:
1f:20:b5:81:c9:c8:7f:b3:56:8d:4b:09:8a:4e:38:c7:9f:bf:
cd:89:88:57:a3:e0:11:78:21:d5:e4:0b:71:04:79:ac:38:ed:
1d:16:3e:56:f9:2c:54:af:50:df:ae:45:fa:0b:02:25:a9:c5:
64:5a:be:dc:1b:ce:82:7e:73:c8:72:26:6e:9d:a1:36:2c:65:
bd:15:21:d2:3f:04:16:ca:3b:ce:f0:f6:e7:c2:2f:c1:04:b7:
f6:86:a7:21:3b:e2:22:3d:ee:d4:a3:1d:e6:02:02:bc:e5:80:
a9:44:8e:81:e5:c1:cf:a9:48:ba:86:2d:e3:80:35:4f:2e:3f:
3f:a7:f6:a5:61:d5:8a:0f:fb:be:ac:16:1c:df:a9:62:d3:f2:
14:22:b6:55:62:62:77:21:66:a8:0b:e3:f8:a4:93:57:51:dc:
de:f7:b0:58:1a:1b:b3:89:d6:af:ae:82:f9:ac:35:6b:d8:9e:
52:e1:b2:7a:5d:86:2f:d4:ab:68:fa:e2:87:8c:b6:0a:80:63:
54:9c:a6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:43 2025 by rpki-client