Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: NRCxJUipdGRqVp/QlvHv5ZkI0IFYHs6WXZt9RXzWLIE=
Subject key identifier: 05:29:22:38:F3:0C:FE:F5:77:50:A8:C2:4B:51:01:09:06:89:BC:64
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 0194BD17D81ADBF28DFB4B50CB935363045D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 0FE1
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: nr7+AST61Bs5tqxA+VcAc0PeWEDTXPyecja96apPuFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d8:1a:db:f2:8d:fb:4b:50:cb:93:53:63:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=05292238f30cfef57750a8c24b5101090689bc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:e2:0c:d2:56:b1:e7:1e:2a:fe:8f:1e:4b:
a7:1f:2f:a6:78:a2:de:f0:f6:fc:11:e2:41:bc:eb:
d1:08:7d:91:a6:46:b9:c9:3a:67:0e:eb:9f:d5:13:
2a:a2:f3:02:38:13:8b:c3:fe:f7:c8:f0:f6:70:7e:
54:c3:ea:5e:46:17:08:12:f3:10:87:c4:f4:67:53:
27:4b:8b:84:d6:67:1e:38:70:20:ef:2b:a0:eb:e7:
c9:5b:e5:2e:e9:e5:e7:9a:79:81:50:8f:a8:aa:7e:
4c:0f:cf:d1:04:d4:16:74:62:6f:fa:c0:53:8a:8c:
65:fc:ed:77:89:65:52:42:f5:2a:48:43:2c:d8:59:
63:21:28:02:a3:3f:5d:19:75:f4:80:3e:fe:41:29:
e2:7c:6b:b5:3f:ae:6b:75:02:fd:da:88:a8:70:e3:
43:5b:ab:42:22:7b:10:44:03:e0:72:ee:de:c4:6e:
27:10:7c:af:09:fc:a2:8e:ad:f7:14:1d:c9:c7:49:
62:ac:3a:33:3e:ed:18:32:00:6d:53:92:59:df:c7:
cb:6a:43:08:66:59:53:d3:fb:c7:0c:a5:5b:e1:33:
c7:a1:75:3e:de:34:c5:17:e5:2c:36:3c:56:ed:09:
37:40:c2:f1:f9:1a:2c:b9:f7:a2:f0:b7:c1:28:11:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:22:38:F3:0C:FE:F5:77:50:A8:C2:4B:51:01:09:06:89:BC:64
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:46:bf:0b:0e:01:15:00:33:d8:65:a7:8d:39:e4:33:a0:96:
fd:50:01:06:57:ae:c3:3b:81:fe:2a:e6:74:bd:50:73:5f:77:
ee:56:dd:cc:f7:6f:3e:71:e0:af:fa:cb:69:96:5e:9c:d9:f9:
6f:2a:59:c8:7f:5f:7d:d1:9e:0b:37:e4:ac:8a:9d:37:81:32:
b0:ab:ad:cf:5e:1b:4d:e7:2f:ad:40:22:6f:62:d7:df:33:51:
5c:ec:02:65:95:bb:77:c5:a6:1d:95:ca:f2:9c:7a:2f:16:2d:
1f:19:07:0a:6d:2e:a2:46:b0:a6:83:01:a4:ba:c4:c4:ef:49:
aa:34:6b:8e:f7:e7:66:ae:d9:5a:54:89:bd:c6:08:11:71:5b:
29:02:9c:d8:86:b8:8c:7a:f9:2d:63:a6:7c:ed:d0:23:5d:7a:
3d:81:ec:f6:bc:17:e3:c4:89:ff:e3:5e:f8:75:b3:0f:a8:ae:
21:47:e1:79:3f:8a:52:1c:31:34:4b:5c:3d:97:24:19:05:39:
af:46:72:41:43:f9:ad:72:fb:e4:af:52:f2:36:d6:56:2f:8c:
50:95:e6:37:3d:eb:34:2a:42:00:05:d2:56:d6:e2:1f:c1:df:
62:45:8b:8e:11:eb:cf:74:0d:46:4e:f1:3c:16:0a:38:0e:96:
9f:a5:69:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:15:00 2025 by rpki-client