Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: wSrMela9lA5WG6wcFlM2AOaJXJZKu5tmxepN50xJD/g=
Subject key identifier: BE:E8:2C:A8:69:E7:85:63:DD:6C:BD:F3:42:43:4C:69:18:9B:A3:E3
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 0194BD4E70700848B2B510F04B9E3A51E908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 0F86
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: Wfouka8OpGS4fZliBziYpzksBG+hmwfBWXSW9sH2MdU=)
2: ncyldnuUad6lbICDevoY8KZ-x3w.roa (hash: OSa+DbEF8WheSbxxiKmk0v1Qp3sUjMtkkFYhRfXtubU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:70:08:48:b2:b5:10:f0:4b:9e:3a:51:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=bee82ca869e78563dd6cbdf342434c69189ba3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:5e:cc:5f:62:c2:df:37:f0:5c:5e:6e:eb:
ed:db:7a:fc:36:e6:83:b7:d6:74:7e:be:5c:36:bd:
11:bf:33:28:93:f1:56:7b:4a:1e:7d:4b:2a:03:8e:
f5:09:3f:58:41:8c:bd:8a:39:da:0b:15:44:38:5f:
94:23:21:88:b8:53:7a:0a:58:50:a7:27:91:2b:4d:
12:cb:6a:55:94:de:94:d3:c4:ab:7d:4d:3d:70:9b:
02:9a:be:b1:4d:04:80:13:eb:68:82:f7:34:c5:7e:
23:14:ff:14:d4:0e:60:db:ae:ad:82:5b:29:b8:48:
b1:bf:68:c2:81:02:8e:de:62:c8:e8:f2:79:2b:b6:
21:51:2c:87:03:81:4e:3a:cf:55:e9:e7:bc:d7:9d:
ff:b3:ff:29:ca:2c:4d:3b:21:b9:3b:b6:2a:ce:3c:
b4:b3:32:ee:6a:52:75:3b:7d:c3:a0:18:6b:eb:47:
87:32:04:c8:4f:cf:14:54:07:01:6c:64:ee:5f:b0:
8e:a8:f7:74:b2:3a:dd:e4:19:2e:a2:dc:fe:11:45:
4d:7e:3d:14:47:ec:97:f3:7c:7c:70:36:d2:3a:ce:
dc:a1:6c:f6:bc:19:41:8c:63:ea:94:ec:a7:24:95:
d2:78:8c:e3:03:f0:a3:d3:31:5a:e6:e4:1d:27:23:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:2C:A8:69:E7:85:63:DD:6C:BD:F3:42:43:4C:69:18:9B:A3:E3
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:61:16:39:2d:27:1c:8c:72:57:2a:23:b5:04:4b:7d:3b:91:
ed:c1:76:90:64:82:0d:b3:ab:cb:1c:22:a2:14:a6:33:b5:cc:
f0:7a:ff:19:58:aa:fe:b1:fa:2e:79:7d:18:21:8a:84:fc:0f:
30:6f:ac:75:6b:f4:b0:dc:6c:75:8f:f8:5f:ec:2a:cd:01:f0:
f9:36:53:bf:83:2b:7b:38:9b:82:e6:bd:d8:f5:6b:1a:31:92:
3d:62:33:95:26:e6:46:6f:cc:64:de:26:df:53:7f:42:fe:b5:
48:64:53:20:14:bc:82:be:a3:38:2b:4a:cc:e1:1d:5a:66:b3:
8c:66:61:8e:94:9c:dc:78:1e:59:be:31:0a:42:33:3b:5e:09:
f6:a1:62:2a:e9:36:c7:b7:25:21:5d:3e:c3:64:b3:c8:09:ae:
99:9a:85:87:36:9c:ed:49:b9:50:aa:48:3c:e6:67:2a:a4:c5:
66:99:3e:ea:f7:fc:e4:e3:22:f1:0e:07:7e:59:d4:c0:0a:0b:
39:ae:72:48:91:e3:23:33:22:63:77:42:80:27:ef:0f:7e:c8:
70:7c:e2:fe:00:3b:7d:bb:6a:32:7c:2e:07:2a:94:81:7b:5d:
d7:d6:85:9f:b1:86:9b:f7:5b:80:b6:30:eb:5c:c8:1b:29:26:
44:a7:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:19 2025 by rpki-client