Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: XvkvDHiI/OXS5RWKyYBn9J5hDdsud1UUhN2+h+fDte4=
Subject key identifier: C5:57:2A:18:CF:BE:02:59:68:2E:16:EE:4C:0E:E7:77:C4:C5:28:AC
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0194BD4E86AD85957AC1A42FD875B6FFCB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 07B4
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: Da4maF86kTI4H6sVxZIuwXK7MqR9zVwhWWv8aMuwZU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:ad:85:95:7a:c1:a4:2f:d8:75:b6:ff:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=c5572a18cfbe0259682e16ee4c0ee777c4c528ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:4a:6c:49:74:a5:4b:f2:19:f6:46:e8:36:
d9:dc:d4:f7:dc:82:ea:df:28:7b:34:10:86:aa:9d:
19:52:f7:00:3a:eb:d1:e7:96:a3:8c:90:57:77:e2:
de:a8:be:99:10:52:c6:7e:1e:9a:45:0b:57:9e:bf:
4f:69:4e:8a:8f:0c:14:5b:5f:2d:1e:0d:35:8e:82:
74:6d:c7:c4:ca:36:6a:2e:2f:27:3d:2b:26:aa:e3:
dc:64:69:24:f0:d0:64:3d:ca:b1:61:6a:d3:8f:cc:
4c:91:97:ac:d2:fd:04:89:37:b3:96:7d:4c:71:fd:
f8:ea:20:d1:20:1c:cb:cf:81:10:45:44:c7:98:35:
95:86:ab:de:3c:3b:e4:44:21:3a:f8:0d:7e:c2:11:
bc:36:c2:99:ef:ab:35:8a:80:9d:42:f8:b2:d2:f4:
ad:80:15:0e:b7:63:3d:9a:a5:9f:18:8d:d6:c8:8b:
db:27:ef:3d:c5:24:7a:b2:69:49:26:18:99:0d:76:
92:c6:07:07:b8:eb:c7:0a:5f:ac:0a:41:57:e2:e5:
85:5e:21:81:61:ee:28:ee:60:43:63:f0:4f:dd:a2:
bf:20:c6:48:d7:32:14:20:de:a4:52:29:56:91:50:
34:48:10:85:19:71:62:c7:fd:ab:34:8a:c0:8e:64:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:57:2A:18:CF:BE:02:59:68:2E:16:EE:4C:0E:E7:77:C4:C5:28:AC
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fa:8e:b1:af:72:01:dd:71:b8:1f:f6:e6:6b:1d:31:1b:2a:
df:9a:3f:80:af:a4:3d:7b:0b:48:f4:df:f7:6c:c4:90:cc:4c:
dc:5c:e8:29:37:92:90:e3:1f:2e:72:dc:fc:90:4d:1d:e3:37:
ed:9b:22:46:db:f4:42:55:a9:7d:a7:b5:5b:3c:a5:90:91:57:
c2:4f:69:55:1c:90:16:c4:09:81:4f:ec:1d:74:8e:5a:55:e1:
c4:7f:5f:3b:2e:a7:ea:3e:52:4d:d5:a5:b1:64:b1:a2:82:50:
ff:6a:3e:0e:c1:2d:07:1a:ee:6a:55:ea:6d:a7:03:2d:a2:46:
07:9c:8f:be:cf:7d:4f:e8:9f:15:48:f3:1f:d9:4d:e3:7c:c6:
c0:7a:2b:cc:e9:6a:50:fa:4d:d1:09:42:81:56:6b:d2:4b:9a:
f9:2b:e0:38:b3:e4:3f:aa:bb:f8:39:60:bc:79:bd:c2:82:b1:
91:cf:43:86:ff:38:57:e6:3b:cb:09:7a:9b:99:cf:b9:d5:a1:
1b:29:e7:40:4d:58:bf:09:e8:d8:54:2a:5c:24:39:22:80:94:
ef:ea:3e:c4:0c:a4:bb:23:28:dc:05:2c:18:61:50:f8:1e:19:
5b:fb:58:62:10:90:a2:2f:bd:18:13:9e:39:bb:27:41:4c:81:
33:d8:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:49 2025 by rpki-client