Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: p66H5juWYWmgTI4HGKrQW94zXwEFL85sHfc0tt3Dz1c=
Subject key identifier: 17:75:18:82:50:5F:32:E0:31:70:38:E2:77:1D:B7:33:2F:13:F5:56
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 0194BD4EA7B9AB65962DF092C929AD3AE7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 0F00
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: KCzJCXl3RNd40oomrdkPU7EP8idpnr8yM/0JTX0Hwe8=)
2: WhWQtaasnXhce4uUgLMkfia6_fo.roa (hash: D7trmdSCq7r/k8TYb50IMju8s2o1usQc52do6qxrWBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:b9:ab:65:96:2d:f0:92:c9:29:ad:3a:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=17751882505f32e0317038e2771db7332f13f556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:1f:a0:85:6a:72:e1:81:2d:cc:58:9b:b7:
39:c9:73:a8:26:78:f1:21:a8:0c:1e:71:38:99:f5:
e4:72:25:3d:16:14:ed:c7:5e:25:6b:1e:37:54:8c:
43:0d:a2:ef:32:9b:d2:2c:63:d0:28:53:ac:5f:bd:
ca:c8:a1:fe:ba:ae:ac:36:15:4c:a5:07:bb:71:8f:
1a:a5:7c:76:00:4e:63:76:52:3e:1d:0d:96:e9:26:
cd:5d:e0:7a:f5:8a:79:58:15:90:3f:4a:64:62:10:
25:ee:fa:72:8e:8e:ab:55:c1:07:08:de:a2:3f:62:
ae:08:75:34:8e:36:c1:10:d2:55:88:f1:26:ae:32:
75:1f:52:2f:24:bb:d2:63:cb:6b:2b:55:cb:33:8e:
45:97:05:14:30:8b:ea:16:55:8f:c5:b2:00:b2:74:
4e:03:04:24:34:86:e8:19:6b:e1:b9:26:e1:bc:d0:
38:86:8b:2a:f3:1a:5d:1a:69:81:3b:39:fa:40:62:
4d:50:b7:87:29:33:6b:dd:f1:73:95:c8:0e:c4:cb:
5f:f9:05:f8:b3:e4:47:b8:1c:b5:ef:ef:29:df:df:
40:66:e5:e4:e7:89:32:48:c8:ce:6a:48:22:8f:34:
9b:f7:ad:46:31:38:6b:f7:b7:38:fb:ca:4c:12:7c:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:18:82:50:5F:32:E0:31:70:38:E2:77:1D:B7:33:2F:13:F5:56
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:28:bf:aa:71:1c:bc:f9:52:d4:e2:cd:f0:ab:1f:de:1d:
5f:85:b7:17:62:d4:f1:4c:0e:d8:f0:3d:e0:83:fe:d3:e4:44:
9a:36:a7:60:1b:20:2b:20:2e:1a:f5:7f:fe:c3:e1:e4:75:8b:
39:74:86:50:d8:c1:a2:24:1d:1c:1e:f0:d1:b9:6a:40:82:7f:
c6:e2:3d:ee:00:d0:0e:5f:e1:59:d0:af:fc:ae:3f:94:d6:b8:
82:f5:41:4b:1f:10:b3:d6:57:43:35:1e:0e:69:88:44:ca:17:
3e:53:4f:99:b4:7c:30:0f:88:7f:35:04:dc:4d:af:84:f9:ba:
96:0d:ec:7d:1c:10:36:4f:cd:ff:08:74:be:e9:87:c3:40:d7:
80:ea:f9:a6:43:d8:20:dd:03:e8:a1:6f:5e:5c:5c:07:fa:fc:
0b:72:75:05:92:d1:8a:95:ee:dd:33:d4:c0:da:86:2d:06:d0:
66:03:c8:e7:e2:6e:3f:ca:7e:da:f0:c5:11:14:68:28:e9:72:
e2:e2:b9:73:9e:de:4e:b0:72:60:b3:98:93:64:17:a5:81:8b:
02:e4:73:ad:23:d0:25:0d:60:1f:15:5e:ac:18:23:c5:45:47:
dc:ee:71:9a:66:dc:a4:da:13:a6:5c:10:24:02:69:81:27:f5:
d4:27:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:58 2025 by rpki-client