Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: THkRpNr5R9IawUAPxhRglODA/kBHRfB9q6HwOUfv49c=
Subject key identifier: 03:89:4C:05:4B:EE:CE:51:DE:8C:EC:DF:4D:ED:00:F5:93:8E:D8:B9
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 0194BD853A3D2E4A15D4DB0B946A7CF5C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: mS2d5f+DR4XEgB/2ih7dDfgsb9yiYHaNGrGsFZJqcrc=)
2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:3d:2e:4a:15:d4:db:0b:94:6a:7c:f5:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=03894c054beece51de8cecdf4ded00f5938ed8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:98:50:b9:81:c8:d1:cf:d4:b9:d9:20:ad:
00:4f:5d:58:fc:02:81:cb:bb:5b:b1:23:b3:ed:0c:
77:b7:a9:ee:06:f2:93:1c:74:a2:df:19:35:d3:0d:
e9:5f:9b:95:cd:39:9c:fa:4a:de:2a:0a:b2:2d:16:
67:35:d9:c9:d9:fd:b2:e8:ae:58:0d:6a:c2:b7:58:
42:c3:0b:03:bd:03:5d:93:74:23:e9:de:ba:41:7b:
3a:1b:45:76:6e:7b:69:ee:fe:dd:06:6e:6a:c9:67:
79:cb:f4:b6:2d:ad:ee:3e:ea:11:a6:75:0d:77:31:
4c:a5:6a:7b:6c:c4:ae:9b:f8:b8:ee:c4:41:96:a1:
d1:99:e5:e1:22:e4:0e:20:09:48:5b:61:5f:34:1f:
29:0a:84:4a:13:55:00:32:4d:11:69:ea:2c:70:16:
4a:7b:93:75:ac:f2:fb:a5:8e:d0:d1:66:3f:11:00:
71:0e:54:d2:59:78:b1:e5:0b:9e:65:68:ee:ae:91:
2e:6c:0b:4b:08:c1:25:ae:d6:0c:c4:b1:eb:12:1f:
22:64:1d:ea:bf:9e:19:8e:db:3a:12:c1:8a:6b:a5:
30:3c:a7:d8:0b:92:0f:0f:68:2c:51:f0:96:b4:f6:
6b:e9:55:75:5d:3f:ea:88:fc:ef:fa:33:8a:bd:dc:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:4C:05:4B:EE:CE:51:DE:8C:EC:DF:4D:ED:00:F5:93:8E:D8:B9
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:ee:37:bf:7e:78:2b:f8:3d:47:a6:ba:7c:88:9d:8d:fa:
54:41:8a:3d:30:1a:54:76:97:fa:7d:89:3b:d5:c4:60:7f:00:
36:2f:17:71:44:38:32:16:ab:3a:54:9b:18:61:9a:8d:da:43:
d2:76:9d:d4:44:b3:bf:ea:e2:d4:f6:b0:01:0f:d2:35:69:94:
af:d3:33:da:81:55:db:f5:9b:37:d0:7d:ce:8a:37:7d:30:eb:
24:a2:13:8e:20:fb:e3:99:c9:94:1e:8f:dd:1d:2f:fb:e2:e7:
c1:8c:99:36:d7:1e:e5:28:c4:a5:bf:67:bd:76:ae:b8:48:43:
42:21:24:1b:e0:e7:fd:b7:c6:37:35:9f:69:fb:b2:1e:6c:80:
0a:13:5d:45:4b:41:25:2c:72:d4:b1:8e:e7:d4:03:87:35:6f:
d0:c9:8c:41:98:e2:53:bd:af:f6:e0:77:a8:96:77:63:71:43:
3f:ce:de:ca:6f:47:d7:32:33:a9:2c:b7:96:4a:f6:c7:98:ea:
73:00:65:ae:77:97:75:aa:b4:0e:c7:ce:58:2f:38:ee:10:86:
a0:6c:18:91:23:b3:0f:e2:51:fc:7b:7f:d6:6e:2c:08:0c:59:
bb:59:24:64:b9:da:e1:e2:dc:d1:d7:1b:3e:f2:00:96:fd:c2:
d3:00:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:37 2025 by rpki-client