Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: QRERfdNa2ZKBdGDIxG5ssQeJVMSlcIl10GoVEeUZ7hk=
Subject key identifier: 9E:01:E1:58:2F:5C:FE:D8:F5:5C:45:4C:48:B1:80:F4:DA:75:E0:96
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 0194BD17D7586416601AF43A3FB144B224FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: MIaJysq3OoVLstM2UoKyaCjqpDXf+pLP1lZNX+6yiis=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:58:64:16:60:1a:f4:3a:3f:b1:44:b2:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=9e01e1582f5cfed8f55c454c48b180f4da75e096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:5d:ff:71:b3:e3:a0:76:45:08:3c:da:ba:
be:e1:0a:95:33:fa:fc:cc:a1:83:45:7a:1b:99:e7:
fe:b6:60:bb:bc:b8:7b:43:06:da:f7:1c:45:61:84:
67:9f:8e:1b:a1:89:92:61:cc:94:5b:18:30:c7:2f:
13:af:32:d9:8a:ec:dd:d9:cd:07:7a:50:68:4a:b2:
e8:2e:1d:d7:18:4c:c1:e4:26:33:cd:ef:6f:50:91:
6a:ab:a2:5d:f2:c0:0a:b2:22:1e:25:79:40:cb:e1:
ba:8e:42:3f:39:58:73:48:85:aa:f2:09:43:97:51:
9d:91:53:90:bd:58:4a:50:77:37:17:2c:a1:13:79:
22:76:2e:45:0b:cb:f4:9e:97:cb:3f:02:01:e2:70:
b1:f6:45:71:ef:fc:a3:40:cd:e1:f5:c5:12:20:bb:
c7:e4:2e:67:40:62:71:05:a6:df:82:ca:50:45:51:
3a:cc:5c:13:32:d4:7b:9a:ea:37:d6:49:d3:3d:a8:
ae:6a:ea:48:e3:9f:1f:b5:e8:2f:19:f1:e9:a0:e9:
19:61:d1:22:47:b8:93:91:b0:8a:c2:10:50:4f:14:
7e:41:ae:f7:58:e9:7e:59:d8:89:94:90:9f:30:4f:
13:4b:cc:84:36:24:52:14:62:80:f9:72:87:87:45:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:E1:58:2F:5C:FE:D8:F5:5C:45:4C:48:B1:80:F4:DA:75:E0:96
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b0:22:ab:a9:3c:12:ac:b3:c4:41:4d:91:0d:ca:23:c1:19:
86:33:be:c8:9e:7a:d5:35:81:68:15:62:dd:db:a0:2e:f2:df:
4f:bd:7e:5a:37:93:49:fe:ea:e2:e1:c9:88:71:0a:20:7d:f1:
e2:14:b6:aa:72:d4:a6:02:26:58:7d:1f:88:6a:76:c4:35:d0:
2a:56:34:2b:22:a3:ea:94:3e:3c:e4:7b:41:dc:8f:bc:cf:85:
9c:b3:ad:46:a7:bf:b8:ba:80:3b:a7:90:b3:4f:15:bf:ab:49:
53:85:7c:03:52:8d:ac:7d:b6:9e:42:15:d8:8e:92:44:ef:76:
8d:7c:0d:11:a0:31:fa:3e:d9:78:cb:4b:4c:13:95:81:69:d5:
6f:eb:c5:4a:42:d0:ad:00:12:3d:46:05:b6:68:b0:20:06:dc:
ee:87:a6:9c:e6:63:2a:43:a3:8d:c6:5d:37:53:58:9f:3b:6b:
bc:73:50:13:01:7c:03:8b:74:61:3b:3c:45:f0:89:15:17:18:
b3:25:af:2d:2d:70:1e:0d:47:9f:ea:35:04:4f:a6:54:84:31:
28:91:dd:13:2e:da:a1:d7:97:c4:1e:2b:10:86:e1:93:6e:b5:
9e:90:35:ac:7b:59:0a:16:87:17:fe:21:52:82:f0:51:92:be:
aa:42:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:20 2025 by rpki-client