Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: YX5lEUAA6sIsXrQ0WmmRoYn510J42dAJHujmBFKpBqg=
Subject key identifier: C3:44:58:69:35:C1:FE:A2:D7:44:13:DC:B5:C3:E7:B5:F0:05:CE:F7
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 0194BD17C6B3F8E84E4FD6BCFFD683A5D22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0114
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: CY4eVYy+Rd+NTgpfJo2AAINo/r1B7DWikjYYHsaoS7g=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:b3:f8:e8:4e:4f:d6:bc:ff:d6:83:a5:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=c344586935c1fea2d74413dcb5c3e7b5f005cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:83:a6:be:c3:75:11:c3:93:85:ad:ad:52:
cc:b2:2f:21:4a:bb:b2:b2:59:06:c6:b1:16:f6:ca:
2a:ae:75:54:46:df:de:35:66:11:01:4c:18:6d:12:
46:47:7b:19:55:27:d1:22:fc:62:7f:22:a5:78:88:
4c:69:fd:11:a5:cd:f1:75:7f:a1:52:00:55:fa:d5:
5f:47:55:98:26:20:5a:17:ff:56:ea:f7:b9:a1:e5:
4d:1c:41:b4:5b:12:77:a9:a0:2f:f3:3b:fb:bd:bb:
19:c8:ed:61:f1:d7:6f:90:82:3d:77:34:93:22:36:
f9:4e:12:72:f8:f8:d2:ab:db:d3:b2:bc:b3:41:38:
0c:91:85:f0:6d:c0:94:84:25:64:3c:b9:52:7c:ca:
ed:2f:ec:00:7f:ca:05:a1:0e:6b:86:2a:98:3a:ac:
bf:91:1f:a2:2e:13:bd:cb:ea:d4:62:93:73:7f:34:
e2:ea:d0:be:29:9f:76:31:f0:2c:51:c6:95:34:6d:
ca:b5:c2:0c:c6:8f:13:bc:5d:c7:ef:40:bd:8b:e3:
9f:e9:c3:9b:42:b1:6c:c4:46:70:a4:03:b0:6d:9c:
d9:9f:cb:76:98:48:5a:b8:b7:b2:a3:18:c8:9b:45:
f8:04:5b:dc:57:92:a2:5a:57:9a:49:f8:8c:e3:b3:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:58:69:35:C1:FE:A2:D7:44:13:DC:B5:C3:E7:B5:F0:05:CE:F7
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:79:a3:9d:c8:50:4f:41:16:3a:19:87:7e:69:45:08:61:bc:
c0:df:dd:66:b7:41:c5:dd:ee:85:da:6e:69:87:b7:fa:d0:89:
41:ed:35:0c:17:b6:69:48:a9:e1:73:2a:d6:2b:35:45:52:cf:
8b:91:04:eb:31:c7:da:c4:fa:4f:7f:4c:05:6f:90:aa:6a:a7:
6c:ae:8e:4a:f0:dd:19:bb:d4:74:d4:3a:4d:50:b5:82:4f:22:
48:aa:dd:fc:26:73:10:85:be:da:d0:31:6c:93:da:b0:ac:41:
cd:72:4a:89:98:ce:fe:0b:b3:76:a3:44:37:ba:63:3e:40:d1:
d5:4e:12:35:9a:50:93:f9:fa:59:db:9a:84:80:64:97:84:e6:
ec:45:1f:96:ca:91:4e:c4:6e:79:e6:84:cc:31:d7:a6:5b:d3:
54:80:87:c5:3d:df:15:46:e4:10:31:57:41:ea:70:bd:8f:96:
ef:19:8e:61:7d:1c:c2:17:53:8e:5e:ee:7c:7b:b7:9a:07:1b:
13:6f:cc:7b:65:eb:5c:6b:23:56:92:15:9c:27:a5:20:99:c2:
66:d9:ca:be:d7:36:4d:e9:9d:ed:92:b3:3f:88:9d:e9:f2:42:
21:2b:90:c4:55:e0:92:4f:6e:80:8a:f7:bb:d9:39:c3:1a:3b:
fc:27:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:29 2025 by rpki-client