Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: /jlGkqlcUKekDa550oVu1inFvO+hVJh0LGxTVzZvZPY=
Subject key identifier: C4:3B:76:E9:9E:C1:FA:20:81:F6:A8:2B:8E:16:93:A8:65:6D:EA:43
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 0194BBCE906B75542403F6EAB0D3C05FBB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: 5Nqf2buyB6kzajvoNrrna9ISs0Y.roa (hash: S/cpcZ4+vnl40S6S+8IytjmyHnaXRq04EWDHebrTKyM=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: yOepwoNd3hZ6vA8YI5MhOsV9YHR8rEiTLE7tqYWSge8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:6b:75:54:24:03:f6:ea:b0:d3:c0:5f:bb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=c43b76e99ec1fa2081f6a82b8e1693a8656dea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:19:43:6b:40:d4:57:0e:f5:5a:56:4d:39:
c8:a9:22:f9:7e:7c:99:cf:a4:45:38:15:72:68:74:
0b:da:34:e2:9e:09:96:ee:77:ef:0c:4b:b0:6d:a5:
4c:ed:2f:be:03:2d:d8:6b:af:18:0e:5e:a7:ac:67:
95:ce:0d:eb:a0:47:23:93:92:05:5b:86:9e:24:90:
c5:30:e9:03:a3:df:fb:eb:2f:a7:67:74:d3:17:06:
54:af:ee:a6:64:4c:1d:d8:7d:6d:9e:54:bd:b2:23:
21:b0:c8:2f:bc:2e:05:1f:23:13:a5:6c:ef:a9:7b:
42:e8:88:66:98:61:8d:c2:3f:09:a4:a9:e0:6c:08:
60:f8:e0:4e:33:4b:32:e1:c9:be:e2:0a:3f:94:92:
60:76:7c:f2:95:24:6c:9e:7e:13:f6:3c:59:3b:54:
ce:87:94:67:dc:6b:3d:fb:1d:38:19:74:e1:5b:e6:
1f:fd:ec:67:89:b8:67:e8:7c:02:9e:6e:ae:7c:93:
4e:ac:bf:f7:1f:11:27:74:bf:be:1f:b3:f8:34:fd:
ad:cd:46:ad:19:5c:12:4f:62:f3:4a:e9:fd:75:38:
73:ea:da:11:d0:5c:d0:06:db:5b:62:49:01:9d:a9:
97:ab:43:f4:1a:51:c9:c0:56:a8:f0:bd:cd:0c:e1:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:76:E9:9E:C1:FA:20:81:F6:A8:2B:8E:16:93:A8:65:6D:EA:43
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d3:33:ef:b9:77:5e:22:aa:ed:13:0a:9f:a5:b3:98:34:58:
a9:63:15:98:e6:83:61:ad:a8:48:46:4d:e7:47:c1:98:43:7e:
63:21:63:62:5f:fc:43:1c:e8:9e:a4:1a:ff:38:3a:c9:27:0e:
61:8a:97:6b:f2:6c:e5:b8:f0:5a:5e:18:9e:38:b1:78:fd:45:
e8:c7:73:4d:75:79:12:81:c7:2e:17:4d:11:0a:ac:c3:53:05:
18:89:33:37:a8:85:ad:9c:e7:41:b5:6b:79:ed:a8:12:9a:c8:
6b:20:9a:4e:00:c6:86:15:a7:d0:4b:ce:88:09:12:40:61:3e:
18:8d:53:37:6b:f5:dc:43:f1:74:15:a4:d8:f6:92:f6:83:2c:
79:12:65:24:f2:86:3f:b5:cb:d7:72:d7:9d:57:07:b0:34:43:
92:8c:bf:22:c4:7a:5b:77:fe:d9:69:f9:bd:87:db:06:ee:fa:
e2:d5:e1:a3:02:00:7c:43:35:70:ad:6a:d4:93:4d:12:23:fb:
73:1c:af:da:08:cb:7f:c4:55:ea:58:f1:9b:36:9c:72:88:4f:
ce:46:41:be:42:55:7b:83:aa:b9:0e:4b:78:7e:f9:49:a5:fb:
e2:33:ba:8e:11:ce:a6:06:59:8c:c4:c8:5c:b5:c1:38:f7:08:
e3:8b:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client