Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
File: QLnKyTUxHngDS0BzgwqBo897Rdk.mft (raw, json)
Hash identifier: cQNaL/iJTe29Ho4ufOy0z+/WaDNZDTIiLpgqjr1PT6Q=
Subject key identifier: 62:74:D2:D4:A8:93:F3:4D:4F:91:7E:AC:56:00:71:91:41:A8:D5:7B
Authority key identifier: 40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
Certificate issuer: /CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Certificate serial: 0194BBCE69661ADC67DA7A0AF1BB28749750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 1q_nnAgndZaIqez5io_HHZB7TIg.roa (hash: fcE6bMGj83Q0hVMFOv0EAXM92bWkreUUh6T69N1a/Yo=)
2: QLnKyTUxHngDS0BzgwqBo897Rdk.crl (hash: q91klUOl41w+KwPgFmmAN0YZIZ9y4qGZUTY1PSwce80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:66:1a:dc:67:da:7a:0a:f1:bb:28:74:97:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b9cac935311e78034b4073830a81a3cf7b45d9
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=6274d2d4a893f34d4f917eac5600719141a8d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:79:9a:98:ba:eb:70:9c:e6:c9:d9:55:6f:
3f:e3:32:fb:ca:a5:23:04:a9:21:d7:e8:be:24:da:
7b:b5:80:de:fb:b1:4f:8d:71:79:67:d0:de:a9:fd:
0e:54:e8:1b:f0:17:79:b0:59:36:47:2c:d7:fc:52:
0e:ae:d5:55:db:7c:88:68:ba:76:f3:09:b5:28:64:
93:e5:8d:9c:52:9f:58:cc:73:39:3d:70:05:f4:66:
9b:45:98:b0:18:6e:9a:4d:4f:92:ac:3e:65:73:6a:
c2:fe:1a:95:15:f7:3f:e4:b5:11:b9:fd:d8:45:4e:
a7:2c:96:5e:2d:5c:53:37:c2:d9:de:93:7b:e1:62:
84:e9:00:d7:40:32:af:8a:ad:9c:39:3a:2e:08:3c:
db:f3:e6:bd:9f:f6:7e:21:4d:f9:89:15:d8:74:4c:
c6:e5:17:c5:4c:d9:a4:36:8b:a7:27:7d:85:a0:e8:
8e:44:6f:e2:2c:b9:09:9f:28:ba:ee:3d:14:68:cd:
b8:44:22:55:b9:c9:f1:85:1c:b6:fa:75:cf:20:94:
72:2d:e2:e0:0b:2f:0e:c8:22:ef:ba:33:7a:18:f7:
6c:06:78:6c:50:4a:03:af:04:ae:0c:94:a0:d4:c8:
5c:1c:cd:9c:08:a9:30:b6:6f:5b:ff:32:2c:83:6c:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:D2:D4:A8:93:F3:4D:4F:91:7E:AC:56:00:71:91:41:A8:D5:7B
X509v3 Authority Key Identifier:
keyid:40:B9:CA:C9:35:31:1E:78:03:4B:40:73:83:0A:81:A3:CF:7B:45:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLnKyTUxHngDS0BzgwqBo897Rdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/285ab6-0109-44e1-bb2b-7534fe0f1b83/1/QLnKyTUxHngDS0BzgwqBo897Rdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:28:8a:c0:1d:32:4e:e7:57:8d:fc:45:a3:8a:b1:ec:ac:9b:
d1:16:88:ac:73:32:b5:7e:6e:a1:b9:f6:ce:22:94:28:e0:25:
33:60:04:4b:da:b5:32:32:17:b7:98:d8:5e:96:f8:dc:5d:dd:
b3:b0:f2:b7:37:ff:42:83:39:af:b6:6d:29:13:27:6a:d5:90:
02:b3:20:ec:18:63:28:f6:ee:c2:d3:bd:6c:96:56:51:67:d9:
9a:ca:bb:5f:de:09:06:01:6e:62:09:7e:01:76:c1:03:26:eb:
6c:9f:99:96:90:82:6c:ff:9a:da:84:95:e6:12:19:fe:9d:10:
ec:76:6a:ac:36:fd:96:95:90:7a:7f:58:f3:45:52:8f:92:03:
12:a8:9d:1a:a4:e9:f8:c7:ca:37:b0:8d:d5:42:ff:f4:48:b1:
a9:91:52:78:a3:f9:e2:14:d2:c6:c6:79:50:f8:f9:04:3c:b7:
f5:d2:a7:15:c7:4a:4c:1e:1f:32:d2:7e:f7:83:8c:c4:88:95:
b0:3e:be:19:a2:5a:3b:7e:5a:15:cf:92:86:c4:13:80:6f:bc:
e9:8d:88:15:04:e4:dd:70:b2:e7:87:95:53:a6:bd:d0:f6:71:
2c:49:4a:35:02:65:06:2c:fa:75:93:57:5a:33:9c:6e:a5:10:
97:ba:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:41 2025 by rpki-client