Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: tKMWCISgcptM6tRH2LxO29I6GofpDgt1hg+DPy4YL6g=
Subject key identifier: 49:8D:32:6B:4D:64:57:16:E7:2A:07:AF:48:A9:A4:81:2D:3A:69:D0
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 0194BBCE6861D23B6CC71888DD198D71045C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0A29
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: hKJ9/thVQWT5MrwJydVsXgfgUqwNoY4NViqzoH52WoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:68:61:d2:3b:6c:c7:18:88:dd:19:8d:71:04:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=498d326b4d645716e72a07af48a9a4812d3a69d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:39:9a:09:c6:ff:97:75:8f:5e:6c:c9:9d:
2e:4a:f1:48:f7:5c:96:47:15:83:37:c4:ac:e4:39:
30:8d:6b:f5:b2:9b:40:56:21:db:1e:49:f2:cc:c0:
37:f9:f6:5f:54:ba:8e:a7:6a:2f:89:ed:d0:fc:61:
bd:70:e9:15:d7:ed:b1:56:de:55:8e:45:25:4c:89:
47:bb:f9:be:c8:83:e5:d0:5f:19:2a:0c:b6:6f:46:
b7:37:96:2d:64:24:e7:90:e5:58:9e:33:1e:ce:75:
30:ac:a0:51:27:47:e7:26:bc:b3:aa:b6:aa:b6:15:
f2:ed:47:c9:a2:02:5f:c1:7d:ae:fc:4d:4a:8f:0c:
ff:18:3c:f1:68:0d:2a:f6:a6:de:2d:c2:2c:05:3c:
d5:03:7a:52:42:35:60:88:f6:b3:95:34:ba:78:b7:
dd:a1:d9:e9:ca:35:ec:d8:53:2c:1c:32:dd:a0:49:
2d:fb:4d:5f:03:eb:51:ce:c4:48:6f:0c:02:71:d5:
dc:73:4b:69:f6:3a:df:ec:fd:2b:c9:c8:8a:db:0c:
92:11:cb:09:d9:c5:d6:23:dc:0a:50:3b:ef:fa:13:
a9:f3:02:ed:8f:e7:59:fb:d1:5e:fc:9c:f5:07:b7:
1d:ff:5c:57:47:14:db:99:19:ff:6e:e7:8e:0b:82:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8D:32:6B:4D:64:57:16:E7:2A:07:AF:48:A9:A4:81:2D:3A:69:D0
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:db:75:f9:4d:a8:aa:22:12:e1:51:cf:db:c5:8f:5e:c8:
2a:f2:3e:8a:c8:50:31:0f:8f:5f:71:27:f3:f9:2c:a8:fa:f4:
a9:eb:e7:d8:53:f0:7e:6b:19:a0:ec:ca:18:98:de:c9:15:ca:
8c:41:8f:b7:e8:81:a5:23:d0:c4:9e:69:89:7c:b0:55:74:9f:
93:85:2a:5e:e5:7d:78:c7:ae:c5:66:75:77:01:34:79:3d:e8:
c3:46:91:6a:a3:37:4f:b2:c5:2a:63:d5:2d:2d:22:fa:1d:a5:
5f:7b:43:2c:e1:e8:9e:c2:a3:fc:84:2a:12:34:67:f8:37:75:
6b:bc:b5:69:7f:fb:42:64:17:b5:fc:3a:0e:13:d9:43:18:53:
b6:c8:2b:73:68:8c:9a:83:3d:39:fa:b9:75:1a:65:fa:b3:f0:
1e:d4:e7:d6:10:6d:ad:48:c9:18:76:5c:af:17:61:ea:93:fc:
ef:c9:24:2e:3a:f2:f7:bf:e7:fb:56:9b:17:5d:8d:c6:c8:66:
63:65:08:2b:db:ae:08:6a:9d:36:09:3c:ff:16:f4:8f:a4:72:
4c:60:4e:21:7f:1f:74:21:3f:1b:9a:44:18:69:a9:79:ac:6d:
8a:e0:49:78:d0:7b:3c:29:68:65:31:21:69:fb:4e:65:e0:c1:
8c:64:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:36 2025 by rpki-client