Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: 9VAruIuGRQ+zSgEtPah/BpFqEIRDbSSLjWhyNDtjhg0=
Subject key identifier: 13:DF:91:1B:FB:2F:20:05:DC:4D:68:B5:E4:85:60:D6:30:D1:66:1C
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 0194BD176DDA51FDD466BD6145FDE2299849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 11FD
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: urO27S5lyNPI4WZr16vhm5HJLmVysp+gqrKpwCeFfBE=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:da:51:fd:d4:66:bd:61:45:fd:e2:29:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=13df911bfb2f2005dc4d68b5e48560d630d1661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:ff:7a:a2:05:67:eb:80:53:32:94:40:3d:
b8:5b:5b:06:c8:51:ac:c9:03:46:db:d6:76:7d:c7:
6f:31:9a:31:c3:bb:aa:d8:56:86:65:a2:db:cd:93:
6c:ef:9f:3b:13:5f:4b:a5:90:23:e1:a1:eb:15:39:
63:92:64:a2:eb:f8:1a:f5:99:0b:f9:2c:45:13:fa:
91:45:e5:fe:c9:38:5a:8d:7a:3c:b2:4b:5e:9c:af:
89:3b:cd:92:ab:f4:1a:35:b1:f6:3e:23:0d:1b:ad:
c3:a7:73:b1:79:a3:b7:1f:30:23:29:0b:2a:a9:b6:
e8:a6:ab:97:e1:e6:f5:7a:b7:f0:3e:a9:fa:21:a9:
21:ee:3d:fd:4f:9e:b8:ae:9b:d1:78:a4:b8:20:f2:
f0:d4:f0:8e:93:ac:94:ff:51:3a:09:91:19:87:af:
23:84:3b:52:c5:d4:f6:29:c4:ca:f3:9e:d4:4e:36:
47:b2:3f:8f:b1:65:9f:d7:47:43:1a:bb:a3:d1:c6:
8c:fa:c2:f1:2e:10:cc:41:9b:3d:15:88:81:c5:0e:
1a:17:37:46:ca:cc:e4:7a:e7:7c:26:51:e7:47:9d:
75:75:86:6a:07:f6:ad:27:b6:ce:68:20:30:ba:18:
8a:a1:4d:71:c9:1d:5e:02:08:b6:ee:0a:00:bf:63:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:91:1B:FB:2F:20:05:DC:4D:68:B5:E4:85:60:D6:30:D1:66:1C
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:77:cf:de:fb:3e:13:3b:88:72:85:26:54:30:65:5c:74:
01:71:79:af:7e:3f:3b:dd:29:0f:33:4c:51:e8:8c:77:6e:25:
5b:0e:33:a4:ea:5b:56:c2:2d:48:9f:00:07:9f:55:6a:ae:f2:
f3:bc:9a:1e:ba:28:2e:ce:8a:20:e3:28:e9:63:c7:09:ac:ea:
63:2a:7e:b6:7a:31:14:5f:7b:b8:fb:cd:f0:06:6e:4a:7c:81:
f2:2b:4c:10:2f:cd:f0:16:70:9e:e8:16:cd:95:90:b8:80:a1:
5c:5c:d9:00:4a:5d:91:d2:15:23:9b:86:70:0e:9d:b5:bc:a9:
88:ac:20:b1:db:40:42:17:c5:a1:e8:fb:83:56:08:56:c0:c7:
92:12:12:44:72:6a:08:3a:2f:cc:ae:24:85:7a:8c:1f:ef:6b:
23:fd:a9:8a:f1:9d:e9:02:7d:c0:24:37:ac:8d:92:17:2a:f8:
37:d9:86:41:0e:50:fb:e8:59:26:a2:41:34:85:0b:82:ea:5d:
42:d9:05:cb:17:7f:c2:ab:bf:15:de:d7:54:52:69:f3:9a:52:
9c:76:6a:f6:5f:13:73:9b:d3:70:e0:17:a1:c8:62:63:26:a5:
a8:59:9b:3e:c9:73:90:90:fe:6d:b9:bb:60:90:38:71:c0:03:
72:ed:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client