Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: JDy/QvpZ+zrQkWrtjxE0RrUj0P4pkkT5AFDETFeBqQ0=
Subject key identifier: A7:94:D9:6E:75:9C:07:FF:52:25:E4:43:AC:67:32:EE:46:E3:F6:41
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 0194BCE07BC23A9C48A50189E084640D54B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 11BF
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: Sxv1Y9cT5tXYkIwpoT3H5jjv55P28XGXEJ6A3oyghPk=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7b:c2:3a:9c:48:a5:01:89:e0:84:64:0d:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=a794d96e759c07ff5225e443ac6732ee46e3f641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:7f:d0:1a:9f:a4:01:c5:16:8e:47:43:6d:
c6:64:e8:ec:8a:4a:a3:4b:07:0b:07:74:1a:a0:c0:
a6:02:c1:e4:1b:08:60:54:4f:b4:f7:0e:a1:1f:3b:
7f:98:cd:71:ae:a5:4c:46:fb:70:89:80:d3:ad:ef:
5e:d5:d1:89:c2:f5:b0:89:fd:af:75:47:cf:71:03:
6a:33:f8:0d:6d:50:6f:d3:98:2c:b9:3d:1a:5e:fd:
87:63:a7:22:d3:09:43:3e:85:50:4b:3b:04:0f:11:
fe:63:03:dc:3c:82:43:58:88:93:a5:2e:ea:28:8b:
ae:19:f0:18:de:21:4e:66:14:d4:1e:36:04:21:56:
5b:2d:30:e5:82:de:c4:30:27:9b:9a:bc:2d:29:82:
03:49:d0:bb:0d:0f:42:10:75:96:0f:96:45:1a:2b:
5d:89:be:08:25:ae:61:bd:82:2f:75:68:be:ac:a4:
eb:45:a3:f0:e4:f6:45:25:4a:f5:a0:91:38:ab:b7:
91:61:76:9c:58:86:85:41:81:62:13:c0:0e:e4:9c:
9b:8a:e6:40:74:a8:b9:89:96:39:0a:c5:59:b5:f4:
19:23:88:5e:d6:fd:bd:1e:b1:a1:3d:7a:d4:92:54:
74:9b:0d:04:6a:ec:bf:2f:c3:8f:99:13:ca:e1:9a:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:D9:6E:75:9C:07:FF:52:25:E4:43:AC:67:32:EE:46:E3:F6:41
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:f4:7f:45:84:9a:a4:62:cd:ec:c2:1d:c7:6d:8e:85:51:
cd:d8:0c:d7:43:bd:23:21:0c:fb:7b:cd:7b:34:c5:88:7f:4b:
2d:de:df:f7:f0:98:79:ad:23:fb:b6:57:42:03:3b:fa:6f:cd:
54:9c:f1:13:88:91:f6:b9:db:b9:44:f1:7b:21:56:07:4f:a3:
ee:a9:90:f2:f4:3d:e5:42:dd:e9:35:b3:72:9d:a4:fd:e5:ec:
a7:ff:aa:c4:2b:9f:6f:23:21:95:2a:7f:bf:c6:3b:25:5c:56:
25:af:9e:fc:1c:f0:a6:3b:aa:5f:0a:c8:40:31:3c:3c:15:77:
ed:c2:16:53:ed:b9:ec:bd:cc:05:98:8a:d2:9d:c5:c1:d5:40:
86:05:20:b7:db:dd:b1:d4:f6:11:5d:e3:5b:cf:37:97:b8:49:
23:c2:60:4a:fb:16:e8:3a:42:d2:bf:ed:2f:2f:04:99:c3:3e:
88:e4:34:26:11:65:4f:8a:7e:2d:34:84:8a:23:4d:49:92:62:
90:3a:b4:c3:86:cf:f7:f2:83:21:35:5a:02:65:25:91:32:b3:
34:f1:6f:bc:45:7f:d2:0f:e0:fb:dd:47:2e:e0:7a:5d:22:91:
f4:6b:7d:bc:4b:68:cb:0a:eb:c9:e8:19:ec:b2:03:e6:04:8a:
e8:c8:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client