Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: 7ry6EMJ2h3RCfUHXlMktQjp7bII+ej2zYQS/PTbE0fo=
Subject key identifier: 10:9A:8B:68:61:53:71:11:B3:21:99:16:BF:BE:D8:1F:EF:38:F0:61
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 0194BCE0A6FD097BA5A0808BA55225DD0A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0D48
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: XbSTyQZ/NRnr8zSwc6PbnT4Ocz+M904SOCj9FaTBRsw=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a6:fd:09:7b:a5:a0:80:8b:a5:52:25:dd:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=109a8b6861537111b3219916bfbed81fef38f061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:56:12:c4:58:f4:54:50:3d:51:4f:0f:54:
ed:0e:ed:66:13:3e:f5:17:ca:2b:87:bb:08:fc:b1:
cc:68:b7:f7:0a:a7:e9:31:54:7e:dd:03:21:8d:4a:
35:59:29:b2:00:78:27:a3:8b:23:47:32:3b:43:06:
2f:f2:f1:b2:23:8f:85:9b:88:85:27:84:c8:aa:b7:
7c:85:34:52:53:6c:fe:77:53:8d:5a:8a:75:cd:8f:
95:49:95:8f:18:21:85:aa:89:d3:b5:f6:8e:ed:e3:
f3:06:4c:a9:61:3a:25:5b:fc:6f:e9:bb:8a:ca:99:
29:ab:1d:f7:60:30:e0:39:88:ca:79:55:ce:74:07:
9c:21:3b:5c:ea:32:63:4d:44:11:7a:bf:ce:df:1a:
8f:71:84:16:27:c4:67:ff:59:3d:11:e8:30:53:7a:
89:c5:65:34:4d:ff:f0:0c:5e:d6:a4:c4:eb:72:46:
b0:83:4c:37:ff:bc:a0:f7:5c:df:a2:d4:be:d4:cd:
2e:b0:2f:f0:03:4c:86:0e:dc:31:3c:bb:b8:e4:a1:
38:e6:3f:35:02:1c:e0:8f:48:54:a1:30:ad:de:3d:
fc:86:cc:a3:96:32:f2:65:e9:42:0a:78:1c:ef:70:
7c:67:41:1e:c9:19:2b:9d:66:56:4f:75:29:3c:64:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:8B:68:61:53:71:11:B3:21:99:16:BF:BE:D8:1F:EF:38:F0:61
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:ff:22:5c:4b:23:29:1f:76:16:bd:93:76:ca:21:e4:87:
e4:03:64:9d:c4:34:5f:7a:ca:0b:4a:a0:b8:76:d5:4b:84:13:
dc:b1:54:46:c7:34:1b:a6:6a:47:47:21:31:8d:c4:f6:fe:93:
94:44:f7:1f:d7:0e:30:47:e0:72:59:fd:00:a7:cd:0b:cd:bf:
29:2e:89:20:f1:a5:ef:2c:ba:de:a0:86:f2:61:76:35:41:8e:
ae:f0:4d:2e:33:e6:28:f6:95:2f:3b:e2:e8:f9:67:14:1d:20:
b2:10:a0:13:a5:2e:c9:e1:73:d5:dd:3f:e0:ea:26:04:42:9f:
61:fb:55:73:e3:5e:6e:74:f4:b7:d4:d0:8c:56:97:8d:26:7d:
28:80:8c:f6:54:b9:a9:4c:41:bd:b1:7d:c2:30:87:f1:d5:3b:
99:3e:4c:ed:09:5e:22:89:99:ca:e6:d8:2b:c0:89:e6:00:5b:
47:9d:03:1c:b6:ff:85:cf:e9:fe:5a:b0:9e:9c:f6:75:e3:88:
ec:e2:ed:9d:97:9f:51:ce:19:28:fe:86:79:05:ce:c5:5a:a9:
49:f8:a8:52:a7:8e:d7:72:cd:22:d9:21:22:0f:97:eb:c8:26:
96:d8:3f:3f:81:5f:9a:3a:93:3b:00:8c:72:ee:b2:bb:96:e2:
42:d4:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:57 2025 by rpki-client