Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: Ab5gCj4g4UXvAUlzns8eucXO9p79XtLVPd5f4uMcrps=
Subject key identifier: A0:7B:F5:99:57:CF:38:61:E5:BC:B5:19:99:51:CB:19:11:B1:B5:62
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 0194BCE0B6B85047EA4DFBDF94888F9A653C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: lRDKCh5l2wlui6y+i8tNpKlRQTsMChmWi299mFGnRCk=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:b8:50:47:ea:4d:fb:df:94:88:8f:9a:65:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=a07bf59957cf3861e5bcb5199951cb1911b1b562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:e3:76:a5:78:d1:1e:49:95:a2:6f:8b:67:
10:ca:4c:11:94:83:6f:2e:e4:09:96:74:46:2d:d4:
2d:b1:80:3d:ba:71:91:61:4f:03:d0:44:16:f9:fc:
fa:4c:cc:f6:8c:2c:93:d7:c8:a9:0b:96:e0:dd:64:
e1:a4:81:5b:be:79:a1:b8:d2:2d:76:4d:94:c2:71:
cd:ab:41:8c:a5:98:8e:e8:c4:c4:24:65:66:64:35:
3f:cd:c5:33:cc:46:d9:b1:3f:3d:0a:18:61:43:3a:
33:54:71:49:96:a7:90:73:f3:48:fd:04:3d:c1:72:
4c:76:cd:b6:24:9b:b7:a9:13:01:23:98:31:0e:82:
7f:3e:51:a0:7d:2e:95:9c:c6:1d:ec:fa:48:38:de:
64:b3:c2:19:76:04:3a:3f:ea:78:a3:46:6f:3f:be:
3f:24:d8:c6:05:0e:ea:78:c0:8f:45:ad:88:32:6a:
9f:e7:5c:75:a5:87:a5:47:36:3f:f1:93:ce:b9:92:
45:6e:12:7e:7a:7b:b0:72:c9:3d:21:1d:8f:7b:16:
28:4b:39:34:89:73:78:f4:81:fa:61:c9:e5:e5:f7:
bb:01:bd:58:90:65:f8:2e:63:ba:16:79:f8:6f:c7:
17:70:1a:24:dc:25:a6:15:fd:d8:70:f1:fe:c7:16:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:F5:99:57:CF:38:61:E5:BC:B5:19:99:51:CB:19:11:B1:B5:62
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:e0:0c:a2:89:88:a9:6b:2c:6d:9a:58:40:41:f7:b4:88:
af:f1:e0:0d:ad:07:ab:ef:5e:d6:c8:de:dd:d7:fc:8a:2a:ff:
2d:c2:ba:4d:7d:2d:6e:80:cb:20:73:3a:97:e3:dc:13:84:d6:
39:9d:dd:e1:36:2e:ba:67:eb:04:6c:5e:a0:23:c2:56:2b:59:
3b:5f:49:14:be:ef:8c:0d:6c:7d:90:be:12:e8:de:d0:9c:eb:
5c:a7:9b:05:0f:78:b4:c8:89:cb:a6:b2:28:31:db:fb:5a:14:
bb:9c:29:e5:fe:0d:07:37:af:b7:4b:fc:77:60:bb:65:96:c4:
b6:3f:5f:ba:b8:84:75:c1:fd:24:0d:7f:15:49:07:b1:33:35:
bd:79:3b:e9:4d:59:d7:e5:9f:6f:5f:67:3e:a3:61:c9:b3:28:
1b:8b:f9:47:84:c5:f4:ea:f4:71:48:4d:2b:7f:c9:6c:d2:16:
b8:11:05:6d:25:dd:3b:a8:1d:c9:e3:02:1d:53:3d:fc:11:b1:
ba:c0:c8:3b:d7:11:bf:1f:5c:e5:a9:ef:a7:13:60:66:67:91:
6a:dd:2b:b2:e3:6e:25:72:0d:a9:53:6a:8d:0d:b6:36:bf:e6:
d3:d7:58:c4:1b:d3:c5:39:86:19:46:7c:57:d4:b3:08:5e:b2:
5e:36:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client