Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier: pF2hsOMYD3n7H2qKSDFEaCXGcjF9q1XTgFKjZBJWPMM=
Subject key identifier: 48:2C:9B:41:E6:FC:BD:C2:5C:13:DD:61:A6:39:E8:03:59:E4:1A:EE
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 0194BD4E93A8B41000130AA7632D8C389310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: yyGOcJtA4QB/p4P1WdcCE6OKLc/WN6c88STbIw8Hxa8=)
2: ybs61exhN0sYw1YgpfqdbmCmhqk.roa (hash: PW/e8DJb4WqsNiI0ODBUiDNLr0vhf0OlyJoAR5NWnhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:a8:b4:10:00:13:0a:a7:63:2d:8c:38:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=482c9b41e6fcbdc25c13dd61a639e80359e41aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:e4:6c:0e:86:cd:d7:4f:ab:e4:0d:53:a8:
1f:13:f5:a2:6b:c1:b0:39:9e:12:3c:de:39:9a:42:
93:c6:cc:e7:3f:57:30:fa:af:19:81:c5:da:79:4c:
44:7d:b8:4a:65:4e:9b:22:9d:d3:b6:0c:b3:9d:9f:
2c:9a:bb:54:d5:c2:5f:70:28:9f:68:0f:34:79:99:
17:92:47:27:6c:0f:71:84:42:99:2c:00:d5:72:1d:
95:d8:5e:bb:4a:54:97:94:b5:92:fe:b9:5c:5a:0e:
34:d1:29:16:26:a1:cd:c2:b5:95:3f:bd:b7:6b:b9:
6a:75:96:e3:a8:64:ca:a4:18:74:66:6b:e4:73:f6:
71:87:cb:cb:2e:e6:34:72:62:1c:c7:2b:7b:48:78:
ba:90:3e:7f:f8:27:75:52:a5:64:bf:51:47:6a:98:
84:1a:0f:8f:06:d5:67:32:1f:32:84:f9:1f:ab:4c:
45:04:9f:56:a4:39:33:11:18:5b:05:38:1e:b3:fe:
7e:04:0f:24:44:23:ba:26:c8:9e:df:8c:04:1b:c3:
8f:df:bf:9a:65:fc:f3:8b:b4:06:3c:b3:be:6f:c9:
27:fb:e8:32:63:68:84:1d:8a:22:86:3b:be:38:81:
92:ea:7c:60:4c:60:28:74:f8:93:d5:9c:6f:65:9f:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:9B:41:E6:FC:BD:C2:5C:13:DD:61:A6:39:E8:03:59:E4:1A:EE
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:d0:77:0e:fd:a8:13:14:fd:23:35:54:ae:fc:b2:87:ac:
65:45:99:cf:6e:b8:1c:78:fc:fa:c3:1b:02:ce:08:c6:95:3c:
3f:c4:92:74:3e:79:ea:56:17:c2:52:41:17:8d:ae:d6:9c:75:
09:2d:1f:a2:25:54:fa:8b:4a:43:24:e3:c1:fc:e8:1c:8d:cf:
13:44:72:d4:5c:ad:cd:fb:8d:82:ba:17:c0:2a:fe:41:42:4a:
a9:6e:48:51:90:83:d4:96:44:f4:b2:a9:61:40:3d:b0:cf:8a:
0b:60:ca:bf:04:ee:16:e7:84:2e:b8:b3:6a:1f:4e:8b:d4:7f:
7b:6c:fc:53:af:68:73:6d:6a:eb:5c:1a:57:4a:7f:22:d6:1d:
7e:b5:23:eb:21:6a:57:db:cb:09:c8:da:17:eb:bf:ea:8e:d1:
2e:4c:ec:ce:f5:dc:f6:46:80:4a:34:cc:53:0c:70:b0:bb:e1:
08:eb:24:86:28:ad:e1:f9:91:fb:e2:e3:54:a5:14:dd:2f:4d:
a3:cb:8e:d3:b1:8e:1f:b9:66:77:ec:76:6b:fc:81:da:c2:16:
ca:e3:23:7e:96:45:50:fd:37:21:ca:7c:3b:62:37:b8:fb:2a:
3e:4e:8f:43:4d:a6:4f:d0:d7:00:cb:89:04:54:ee:b1:f6:0b:
de:fc:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client