Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: 2E/k/fQIsKXUwyEB5zbvZaRGHhEFFaNN+V++5473X0I=
Subject key identifier: A5:32:7A:39:A4:C3:C9:41:EF:DD:36:BD:5C:0E:B4:6F:4F:C3:DC:C2
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0194BBCE87EA02AD66A3494A9C8D7D48777D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: iDRd3u0G/CM7LFt/kDFFo7bKi6JiAA8V9MLiHQUYzHY=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:87:ea:02:ad:66:a3:49:4a:9c:8d:7d:48:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=a5327a39a4c3c941efdd36bd5c0eb46f4fc3dcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:da:b7:ef:10:15:19:5b:a1:12:27:65:f8:
6c:23:59:f1:94:06:33:cb:f6:97:97:3e:78:a1:21:
c5:dd:38:3a:74:5e:c3:f9:62:8b:98:b7:e8:56:e7:
2b:84:e0:21:f8:fd:4e:ad:b4:ce:bc:44:f9:12:5b:
91:35:87:e3:b2:78:d0:fc:01:94:22:94:f4:07:c2:
1c:c1:9a:e4:56:48:73:8c:34:77:7c:ee:61:4c:a6:
d6:aa:f5:f0:24:81:68:1d:69:75:dc:de:3c:c7:44:
5c:cd:78:04:be:82:36:b1:94:6e:49:a6:01:45:07:
d5:b0:2a:2f:06:6c:ca:fa:16:00:f1:8a:5a:81:0b:
81:d8:df:81:de:4b:f6:e9:3d:e9:01:b3:a5:76:90:
d5:f1:b2:6a:47:62:2d:da:c2:98:53:e6:30:85:bb:
1f:c2:f6:4f:ce:14:89:3d:d1:52:f2:0d:9e:fc:f5:
6f:2b:f6:3a:fa:78:ad:35:a1:2a:0a:8b:80:8c:3a:
8e:9f:b2:7f:21:1c:68:69:27:c8:8a:15:bb:a7:34:
de:b8:02:d2:66:e6:97:fe:b8:e3:8d:64:e5:8b:9a:
4f:aa:02:5e:2a:3a:fa:1d:c5:81:5e:59:15:86:89:
a3:c1:61:44:cb:a2:5c:70:39:84:13:f5:cc:93:39:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:7A:39:A4:C3:C9:41:EF:DD:36:BD:5C:0E:B4:6F:4F:C3:DC:C2
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:86:db:e9:9f:f0:47:af:42:7c:f0:26:d0:68:4c:42:4d:bb:
97:e6:59:84:ae:a4:61:1b:00:f7:bf:26:08:eb:50:df:bb:00:
ff:30:e4:99:b9:72:65:79:7d:02:16:cd:31:1a:11:2a:a9:fe:
00:01:f5:ee:34:51:61:48:cd:14:2d:0f:ca:a5:c0:f3:89:f1:
0c:f1:60:66:62:a0:7a:1c:6f:c3:6f:61:41:11:0a:1c:ca:21:
28:e4:96:23:99:54:de:0e:fa:a3:59:e5:c8:52:56:5f:7d:e3:
5c:8f:30:01:a7:ae:08:3c:a7:99:3f:86:e6:29:d9:67:40:36:
57:30:d2:60:a0:0d:7e:40:ae:a9:b6:f5:e3:f5:12:56:ac:0c:
8d:8c:50:8e:8d:b9:ba:3c:97:10:60:c1:00:52:7c:4c:0a:58:
01:92:25:12:9d:0d:8c:b6:93:b2:c9:ca:da:a9:31:bb:30:4e:
dd:74:5a:33:83:3b:b4:02:68:d1:a4:8d:74:ba:05:47:ed:88:
50:14:74:1c:1a:d6:50:a0:d8:56:b2:ea:de:4f:cc:97:0b:cb:
f4:7d:74:d6:f9:79:e2:5c:50:dc:0b:89:66:4d:b9:de:04:60:
ca:f0:20:da:de:be:9b:45:21:01:28:7b:20:53:fb:84:bc:f4:
2e:a0:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:40 2025 by rpki-client