Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: tWjH6vaq0R1pnDRb3SVOwOMwZZnaQswRSMgWfZZ2xRc=
Subject key identifier: 44:EA:D5:93:FC:87:63:37:3C:6E:90:C3:65:D1:46:E3:BD:13:CE:DF
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 0194BCA9BC4A928C6A2A83D79D34EDEFD710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: sbukXcMVBm/APfGBbKfhK/rHTEFrGl0wYfi4x9gRq6k=)
2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bc:4a:92:8c:6a:2a:83:d7:9d:34:ed:ef:d7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=44ead593fc8763373c6e90c365d146e3bd13cedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:8f:db:17:2b:7a:ef:18:8b:e3:c9:95:7f:
ef:87:91:80:f1:f7:2c:6c:4d:10:1a:77:91:70:c9:
0b:18:19:a4:f1:d0:56:18:d2:90:06:42:10:8f:84:
9c:65:74:35:4a:90:3b:8d:54:4b:53:19:95:d5:ee:
41:40:c4:8a:d6:6e:87:56:1d:1d:18:97:45:c8:cf:
c9:04:cd:3a:d7:06:0e:c7:f2:19:4a:e5:64:86:ec:
5e:1c:f7:15:d7:f9:e2:ef:01:6a:79:56:27:15:d3:
e4:04:25:af:97:fd:a6:15:fa:22:9a:f4:d3:23:99:
c9:e8:26:48:d1:1e:6d:21:61:65:76:c7:6f:3b:e8:
32:64:01:53:09:a3:05:d8:a4:80:60:92:97:7f:5d:
33:45:5d:d4:79:48:bf:e3:83:f9:54:c5:57:6b:9a:
50:e6:34:57:df:13:c7:1d:a3:71:36:25:98:6f:9e:
2d:8c:af:f8:a9:c5:86:88:fd:7b:56:d4:69:9a:80:
3c:bc:2a:b6:22:82:f4:e3:76:a7:45:4f:8f:aa:34:
f5:bc:07:06:7b:78:b8:a8:5f:37:2a:ad:72:61:bf:
84:20:1f:dd:65:15:f1:62:32:ad:e7:94:c0:12:99:
22:5e:ee:92:0b:cb:2f:b2:8d:30:4a:a4:7e:8a:4e:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:D5:93:FC:87:63:37:3C:6E:90:C3:65:D1:46:E3:BD:13:CE:DF
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:18:43:75:d2:46:56:b0:3e:26:6b:59:ea:d9:5d:65:2c:
e4:2a:d8:fd:09:30:4e:53:74:40:0d:5f:55:5b:d2:89:63:49:
e6:7f:58:9b:fb:3e:aa:b9:a6:2d:57:8e:33:08:ad:5b:fa:35:
81:65:df:c7:e3:51:ae:d8:3d:68:0b:a0:38:50:61:b3:18:6b:
1c:1c:29:85:a0:02:28:b5:a9:7d:47:b5:f7:47:5e:30:d3:21:
7c:02:5d:95:99:8c:29:dd:df:de:40:b6:08:88:81:87:9c:3d:
a7:78:47:6b:fa:c6:12:6a:7e:e9:07:51:bd:76:1f:40:2e:b7:
b4:36:9c:b2:51:a2:e0:0e:74:3e:bb:40:c7:1a:c2:b5:96:13:
d8:f1:71:8f:de:00:7f:a3:53:33:3d:c9:49:71:93:16:ba:87:
dd:8b:75:73:26:f8:78:b4:09:b7:e9:a1:30:d0:5d:ff:77:25:
c7:3c:06:ac:45:69:37:28:fe:b8:01:8f:86:6d:f5:a7:6c:3b:
8d:b2:1c:ad:2f:f9:49:b5:fc:e3:34:1f:f2:ee:4a:a1:4e:fb:
83:f6:60:68:55:58:b5:55:66:41:1b:b2:20:74:4a:89:96:c6:
dd:f8:5f:b7:6e:cb:da:34:ca:99:b8:99:2b:63:1e:83:41:0d:
d5:65:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:12 2025 by rpki-client