Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: tVBlwPNam91gWd08OsQunFnFv7yEMJowPG+X8wYJWPE=
Subject key identifier: 22:26:63:DF:81:84:7D:37:47:BD:04:4A:F0:FA:C9:88:3A:EF:75:C3
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 0194BCAA23033BA38FD0CB42B44B9923335D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: pzbZWVr7bZdOuHtjC7acZUImj3cQH5a+OiRodIUyYzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:03:3b:a3:8f:d0:cb:42:b4:4b:99:23:33:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=222663df81847d3747bd044af0fac9883aef75c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:4c:0d:90:da:ce:95:79:d4:a3:14:39:78:
e7:8b:7f:bb:74:cf:84:e8:0b:25:ad:7a:91:5a:e3:
3b:bc:09:4a:97:33:f7:c2:64:1e:78:58:7a:b9:8f:
39:10:82:cf:c5:74:7c:1b:5e:5f:4b:4f:72:f9:ab:
4f:38:8e:da:e6:e8:81:4a:41:e1:3b:8c:5f:1b:7f:
fe:6f:da:df:7d:fa:69:9f:c3:3c:f2:44:34:b7:1f:
77:d0:8f:06:89:45:e9:ec:a0:b4:03:82:e7:9c:c1:
79:c1:84:2e:ea:01:7d:83:fc:f9:26:43:a1:a3:16:
1e:a5:ac:c2:8a:b3:fe:44:86:3b:54:c8:12:33:4a:
65:ce:ce:da:c9:2b:e7:69:38:12:3f:4b:25:58:88:
eb:43:08:61:85:f2:64:be:f4:d9:4e:84:38:f8:2e:
18:79:cf:be:93:a8:db:c4:30:c4:20:55:a4:0d:00:
0c:f1:ae:9e:73:62:e4:bf:da:c8:38:18:de:e0:b9:
16:8f:db:3d:4b:b4:e2:f6:2e:01:92:15:e7:69:e8:
bd:5e:f6:d8:b3:75:e0:85:71:c0:1f:e2:ac:a6:aa:
34:0d:e4:81:dd:42:e2:86:ef:94:78:1a:47:ed:6b:
f6:9f:a6:c4:43:be:ec:14:10:45:6a:e7:fa:f9:8c:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:63:DF:81:84:7D:37:47:BD:04:4A:F0:FA:C9:88:3A:EF:75:C3
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1d:b8:df:f3:86:b5:d7:dc:0f:6e:60:b7:5c:99:35:3f:11:
48:0c:6c:35:e8:91:d7:1c:ca:82:4a:3c:ad:7b:21:74:5d:1f:
8c:fb:1d:85:db:bc:9b:0d:dd:24:2f:ac:c9:67:5b:c2:00:8f:
06:29:59:4c:9a:c0:0b:15:90:6e:49:82:29:25:f1:b8:2d:1a:
07:89:b7:a6:ae:42:52:bf:4a:f0:3f:28:af:51:2e:3a:61:f7:
3b:c4:62:78:f4:1a:f4:38:cb:93:ba:68:a3:1a:95:5b:50:19:
de:fb:52:ae:e6:01:8a:54:f3:c4:1f:83:4f:a2:70:a5:13:86:
79:7e:c6:aa:a2:ae:fc:4e:d7:0d:a6:5b:4b:be:12:aa:8b:c1:
c7:1d:2d:81:1c:7a:9a:ee:6b:74:09:0d:40:01:86:55:7a:87:
72:8a:38:12:5b:ff:2f:e2:6f:fe:15:5e:8c:51:fd:42:19:bf:
00:50:56:bc:83:f8:92:88:bb:42:b4:17:76:9e:cb:cc:ac:50:
23:1a:91:48:8c:24:eb:08:26:f1:67:22:74:87:6b:d2:0d:fc:
e8:05:3f:20:cb:a8:b3:de:d3:a3:76:02:69:c1:d3:5b:a2:99:
9d:d5:25:51:ed:3a:f1:17:de:0e:44:48:e2:d5:da:96:b5:c7:
f8:30:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:33 2025 by rpki-client