Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: CFK5lqoRZyxvFN1CJl74OTeh1OUsggRnpy+AHYqoTKU=
Subject key identifier: CB:F2:2E:12:4C:47:23:AA:C1:2A:DF:3B:F6:84:BA:4B:80:50:B0:38
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0194BD4EA4B7C8F797F0B7EE69C9AF1897A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 0F33
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: N5uneoUfq3FB9nHi7Ft6jbgDMD9XoyCK1Fjbl5/tCiY=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:b7:c8:f7:97:f0:b7:ee:69:c9:af:18:97:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=cbf22e124c4723aac12adf3bf684ba4b8050b038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:0c:83:74:31:b3:1b:4a:e3:f7:d9:fa:1b:
00:aa:32:6f:65:89:df:5b:34:60:eb:f6:5f:0d:5f:
45:af:39:c4:82:52:d8:31:c3:1f:69:c4:d8:68:20:
46:e6:b7:de:ed:22:86:dd:0b:74:c0:0c:99:c2:38:
b8:08:5c:0e:e0:53:ac:db:68:45:1f:91:4e:03:c6:
3f:96:5f:2d:db:09:04:b5:67:02:0b:45:cb:b4:e6:
e7:15:e1:e1:ec:2b:b7:c3:80:aa:71:bb:d5:51:e1:
da:78:66:e2:f6:96:7c:14:4a:62:14:62:1d:6c:19:
1a:80:15:e2:ee:2b:63:d1:f8:6d:34:e2:45:9f:eb:
27:10:5e:fd:43:d1:97:26:a4:e0:6c:d1:77:6f:b2:
73:8d:6d:5f:df:73:d7:66:82:11:b1:ec:5b:7c:dd:
41:ab:b3:a1:ea:ef:d6:51:d4:38:65:cd:96:93:4b:
65:9a:98:43:c4:3c:9f:7f:49:88:2f:41:05:03:a2:
ed:52:8f:19:67:f7:91:3d:0d:46:b2:5e:f7:8f:c8:
71:66:aa:62:83:9e:b9:d9:64:b3:69:85:7f:b3:d2:
96:c0:5d:e5:f1:b4:1a:8f:8a:cf:c1:c1:cc:d6:37:
58:33:71:37:a0:79:7d:06:d2:4b:b1:e2:a1:83:b9:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:2E:12:4C:47:23:AA:C1:2A:DF:3B:F6:84:BA:4B:80:50:B0:38
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:f6:73:f7:8b:81:af:d3:f8:a3:1e:cf:d4:da:2b:21:2b:
78:3b:4d:00:84:cd:90:bd:1d:2e:b7:59:2b:16:97:d2:ab:03:
ce:79:d8:47:f7:0a:3e:44:07:8c:c7:a4:db:7a:aa:15:10:85:
09:8b:b1:96:91:80:72:e9:c8:1d:ed:1a:e0:3f:d0:92:d7:b1:
80:d2:9a:91:a4:67:6e:21:00:40:f3:ce:03:5f:93:8d:b4:fc:
fc:bd:57:7c:16:d9:09:a1:b7:f5:ac:01:c3:38:e7:77:f0:6c:
99:57:c8:33:39:98:42:05:69:92:99:93:0e:4f:96:a0:76:40:
fb:b7:bf:80:ee:42:db:33:5d:b6:32:79:61:62:d8:f0:bd:19:
95:c0:ff:e4:62:e5:3f:2a:7b:d2:37:15:8a:99:d3:4a:cb:57:
25:45:7c:a3:bd:ae:aa:db:93:b2:1d:75:ac:96:34:61:ba:15:
ca:38:d9:18:14:8a:3d:61:ef:c1:1f:29:08:dd:00:99:8e:53:
49:cc:c6:27:d2:e4:15:3e:34:e7:60:01:3f:6e:7e:0f:ac:af:
af:53:1d:e8:b0:c0:99:aa:fe:8e:7c:a8:a7:7a:9f:f4:e4:a0:
99:30:77:85:51:ba:c2:d4:89:10:8b:8b:ef:a3:01:42:b0:8b:
b2:63:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:21 2025 by rpki-client