Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: 1+1XkwmuqERQfxwNqS0v1OAdpd+k8ethb+hBAzFoIb4=
Subject key identifier: 54:D1:31:99:41:29:48:39:1B:DD:5C:BE:63:49:77:AB:1F:6B:C8:B2
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 0194BD8584F76FCF63AA42A39708B3DD8B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: rIJc8osyQDmQtg2mMMN5PlmPCHNvSYA9jpuF9I3l02s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:84:f7:6f:cf:63:aa:42:a3:97:08:b3:dd:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=54d13199412948391bdd5cbe634977ab1f6bc8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:6d:2e:cc:ab:82:0e:ad:6f:81:22:22:1d:
6c:4d:21:8d:ca:87:50:73:9f:45:88:c1:fe:97:5d:
ba:f2:a9:48:f9:df:5e:ac:55:41:8c:f3:34:3a:47:
ef:2e:88:0a:ea:30:df:bf:d7:2b:b5:79:5e:3c:cc:
bc:b2:8b:0c:46:9f:d9:35:bb:7e:2b:a4:b2:5a:fd:
a5:74:c5:56:17:32:30:4a:1c:1b:47:12:4d:76:79:
29:70:70:7e:8b:14:3c:bd:b9:f5:df:86:9d:6f:3a:
4c:67:19:25:cb:bd:59:1b:fd:1c:f7:3b:53:fe:10:
8f:63:c3:2d:dc:a9:ab:3f:5c:ef:66:f8:89:9e:3c:
8c:53:57:e7:1f:6e:c9:59:3e:b3:65:8a:ba:1e:7d:
0d:45:4a:60:e4:2d:4d:22:7d:94:b8:61:ab:1d:74:
a7:5c:5d:8e:63:07:86:7d:7d:d8:e9:c1:ca:5c:0d:
2e:b1:e6:73:18:c3:31:4f:b7:cc:02:29:f4:9d:0a:
f8:01:58:4f:2a:12:c8:ee:d4:6c:72:d9:2a:ce:cb:
a9:26:f4:b8:61:7a:e3:2b:44:19:f6:8f:b1:a7:9a:
b7:b5:02:84:db:ad:07:43:aa:5c:2c:d4:bc:c7:45:
1a:5f:30:3e:ca:0b:35:c4:3a:30:30:d7:d4:95:c0:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D1:31:99:41:29:48:39:1B:DD:5C:BE:63:49:77:AB:1F:6B:C8:B2
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:cf:22:d2:b8:91:b2:b9:e5:04:b0:61:f6:a6:f0:70:65:
42:15:94:e8:e2:9a:52:79:30:aa:61:0f:60:a8:ff:4a:82:8d:
0c:5b:3f:cd:0a:b9:03:8a:14:1b:df:68:85:9f:a7:7f:64:c1:
fd:5c:de:d7:84:59:1d:b2:65:43:d3:42:80:f0:cf:fd:03:2f:
b8:6d:22:2f:15:c2:89:3e:c6:41:dd:3a:32:d9:20:15:7d:c0:
d4:53:f0:1d:c6:69:9d:58:cd:f9:c7:0a:62:c4:3a:c1:04:7b:
68:67:63:43:b8:7b:1a:bc:f6:34:93:b9:65:9b:17:c7:e4:28:
f5:59:ff:06:01:a0:a6:59:ed:47:25:54:e5:86:51:8a:31:21:
c7:a4:87:71:f5:fb:92:db:bb:16:21:c4:32:ca:a1:f1:4f:f3:
ea:63:75:7f:a3:e0:d9:bf:f7:da:ec:a9:01:2c:65:05:cb:64:
45:3f:63:db:f4:22:3e:75:fa:46:9e:28:ab:5b:f3:3a:18:40:
5d:43:1c:cd:e5:6f:c9:3e:f7:87:8d:cb:78:c5:25:a9:9b:7f:
2c:06:63:67:ea:4b:95:a7:15:c8:a7:3a:4a:b5:b8:dd:70:ed:
b6:c6:a7:3c:6b:f7:9b:88:fd:c0:57:d8:b7:c9:ec:97:0f:f6:
ee:bb:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:44 2025 by rpki-client