Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: 8fSUVL8NadXpAfmiCrMbLYFDKzuPRLTpedHdCbDlgpc=
Subject key identifier: BF:F3:2F:E6:3D:6F:22:CC:4E:27:9F:92:B6:76:9B:D8:1F:38:93:A2
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 0194BCA9F153BEE8A779FBC040C34AC3E597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: t7YOTMlb7W3O+CNm/ttU8sNUjddeoD3p1RF/+vd2mD0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:53:be:e8:a7:79:fb:c0:40:c3:4a:c3:e5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=bff32fe63d6f22cc4e279f92b6769bd81f3893a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:8b:22:59:de:09:13:e2:32:95:74:16:c4:
f9:89:c1:45:43:01:ee:13:9e:7f:5b:c6:37:1e:46:
54:4e:39:42:ea:f6:c9:cc:2e:37:ac:ee:d7:12:21:
1c:7b:e2:c2:c9:90:19:20:18:fe:d8:b4:5f:fe:66:
79:ab:2e:c6:a9:7b:f1:47:49:3a:48:b0:20:dc:cb:
d5:a7:80:e0:50:e1:4d:12:b4:e7:aa:1b:c5:f3:b0:
7e:eb:47:91:11:85:94:e2:c7:63:c7:e7:20:36:25:
fa:92:d2:65:50:e6:ef:21:52:62:bb:88:ee:24:8e:
38:c8:d6:2f:24:a5:c7:e3:d1:0c:fd:16:d5:04:88:
c8:63:fb:19:49:98:c4:a9:50:41:d9:ff:7a:37:ad:
76:b6:27:0f:83:61:62:b3:29:6b:d6:13:99:20:3c:
c6:0e:a8:54:ba:a7:81:71:da:a1:78:90:71:54:3b:
38:46:a1:17:1b:14:ba:37:e4:b5:89:98:c7:d3:51:
e2:4f:37:06:a2:f5:36:d3:41:3a:1a:17:e3:b4:c8:
88:48:1d:b4:97:0c:82:fa:03:9b:0a:c5:d6:ee:94:
4b:07:f4:3d:aa:38:4c:4b:58:d8:20:c4:9d:8b:20:
ca:f7:db:c3:12:9a:94:dd:7d:f3:3d:dd:64:61:b1:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:2F:E6:3D:6F:22:CC:4E:27:9F:92:B6:76:9B:D8:1F:38:93:A2
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d5:17:dc:31:a7:4e:54:58:1a:b1:8b:b2:de:dd:b8:98:56:
95:6a:16:9c:59:34:25:85:b2:24:65:da:bc:9c:d1:aa:0a:8b:
c9:32:73:e7:00:d3:fe:24:0f:06:89:5b:41:1d:1b:fe:41:82:
86:02:a7:f1:87:1b:77:4c:5d:70:f9:98:40:22:6c:af:8a:ed:
9f:54:ba:4e:63:e4:f1:29:60:db:2b:4b:47:df:07:cb:50:c2:
69:c4:60:3c:77:3b:f4:2d:0a:f8:23:ee:d3:7c:81:c6:3e:f2:
9d:9b:28:a9:75:44:be:95:d1:86:49:9c:8b:e0:ed:b7:ac:68:
29:4e:10:c3:98:8d:eb:80:2b:eb:37:cb:88:07:f9:31:c2:72:
6e:f3:e7:83:af:e9:32:5b:87:a1:94:70:e6:b7:34:9f:df:da:
e3:bf:a8:db:b4:10:f3:34:ea:70:9c:3d:89:7c:b1:59:07:83:
02:fc:bf:c5:00:21:d1:4b:10:22:b9:70:91:95:83:90:0b:8c:
aa:67:a4:6c:6d:00:73:5a:dd:8b:fc:00:25:56:2b:7b:5b:70:
e3:42:d6:af:a3:09:45:f2:83:83:46:8f:77:fc:3b:f5:c1:f6:
15:e4:be:9c:88:8d:24:4a:de:a5:84:5f:8e:e1:b0:9a:e4:8f:
1f:19:28:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:05 2025 by rpki-client