Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: DoKx3S6HIB2xclmkvVto2iwouwuQNG5YxTfI9B6lHM4=
Subject key identifier: 5F:A3:73:5F:4D:2D:41:B9:46:14:8B:4F:83:12:20:0D:BE:D9:7A:1B
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 0194BBCDDA6E6CB11291DBB82DDD5F964E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: AVEMxBB0XtsKSWFV+SybBll1H1FFhjysRu8+f/1G7E0=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:da:6e:6c:b1:12:91:db:b8:2d:dd:5f:96:4e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=5fa3735f4d2d41b946148b4f8312200dbed97a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:33:fd:28:1f:18:d7:28:97:97:90:55:d8:
46:c4:6b:a1:f8:33:c6:5c:f9:59:12:05:90:7a:e7:
b5:11:b4:b4:d0:b3:54:3c:2c:45:b3:23:c4:22:bf:
74:19:67:4f:11:69:f3:dd:4e:c8:8b:86:bc:74:6e:
7a:6d:94:c2:74:c1:8e:1d:72:3c:0c:fd:ab:85:b6:
14:39:ad:24:36:2d:33:b5:49:03:95:26:7b:95:cd:
59:da:ba:aa:3f:d4:e1:16:d2:b9:44:96:6c:4c:c8:
90:a5:a9:37:45:b1:2d:df:c3:9b:6d:5f:81:9d:af:
ad:19:1f:75:de:1d:d5:e7:7a:09:a9:6e:5f:ac:ed:
04:aa:fb:57:84:39:9c:93:4c:43:b5:2f:7e:b4:9a:
8c:bb:c9:ca:61:d7:cb:09:e8:0a:b3:ff:1b:e1:c5:
10:f7:06:2e:ea:a8:85:6c:67:86:b2:bf:f4:37:5d:
8b:6a:dc:c0:a5:23:e9:55:38:21:3d:83:f6:46:c8:
d3:f2:ca:66:87:00:50:7e:18:81:10:bb:dd:47:17:
f3:9a:95:5a:2f:82:26:21:3c:7f:35:ef:68:78:4d:
6b:68:4a:40:33:eb:72:89:58:22:a3:81:f4:6e:32:
74:18:7a:a0:26:94:00:a3:40:54:1f:5a:8e:16:8d:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:73:5F:4D:2D:41:B9:46:14:8B:4F:83:12:20:0D:BE:D9:7A:1B
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:54:e1:9a:99:b6:1c:66:51:e8:42:36:be:ef:30:92:aa:1a:
4c:55:c1:2b:ee:70:3d:ea:36:45:1b:24:14:a0:03:52:58:9e:
22:8d:4d:ef:80:ec:f7:d2:5f:53:d7:68:8f:a9:b2:97:cd:05:
fa:7c:c4:f6:34:b0:68:3d:0a:cd:db:73:30:c6:25:72:27:5d:
e9:e4:9e:bb:c2:33:58:3b:97:cd:2e:a8:31:36:5c:10:3a:2c:
47:f3:08:e6:e1:9a:8c:d0:a0:1f:a1:db:80:46:68:08:07:74:
44:4a:f8:41:8f:8e:7b:e4:b4:3d:dc:dd:a5:33:ed:44:ac:d2:
71:b1:d2:fb:41:fa:07:84:6d:e1:1f:83:b9:4f:7d:d3:8b:d7:
9e:f2:a5:19:6c:02:07:38:9d:14:ea:d6:d0:f2:27:80:ce:89:
98:1f:32:78:f3:62:46:8a:da:02:b5:35:91:37:ba:00:cd:0f:
ec:da:c3:46:ad:13:d5:b2:f7:31:40:31:7b:60:cc:41:32:20:
73:c0:4c:1c:cc:51:16:40:7e:e2:08:e3:3c:11:7b:43:5c:bd:
a5:d3:d1:39:cf:cd:48:a0:03:38:ee:4c:06:18:49:62:e8:e3:
99:f9:b1:dc:68:43:9b:13:b8:44:45:4b:58:1c:c1:a5:65:d0:
08:4f:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:48 2025 by rpki-client