Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: efEz0N3HXds4PNuX9l9nI145bjEfakNhTQcnYJxvuQg=
Subject key identifier: 3B:A5:DC:E2:E8:DC:14:CE:28:79:EA:15:27:77:0F:13:F7:60:ED:86
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 0194BD85ADD924F256DEEE71F1861CEF4DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: 1HhnnGPnNDqrzqFZn95CPndNdhmPpUSPeiZToIINrF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ad:d9:24:f2:56:de:ee:71:f1:86:1c:ef:4d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=3ba5dce2e8dc14ce2879ea1527770f13f760ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:7f:d6:af:1f:72:0e:38:e0:a0:c7:ab:91:
d5:ea:48:af:a7:5e:d9:46:78:b3:a9:7f:79:a3:22:
ca:d5:cd:d4:a0:18:b8:d2:b7:40:eb:1e:0d:5c:0a:
e7:48:2b:6a:c7:f9:9e:b8:64:7b:18:2f:1c:9d:28:
40:14:a6:85:2a:60:23:a6:ed:e3:d7:89:90:46:2d:
a6:65:12:0c:bc:27:28:89:b1:29:8a:de:7a:06:4c:
55:17:da:34:f3:8f:29:06:77:8f:91:e3:aa:f6:76:
f8:06:6d:ee:6c:73:d3:41:cc:46:69:7f:6a:41:0f:
56:1a:7e:9b:79:de:36:2d:af:66:22:b1:b5:8c:74:
81:a9:63:86:9a:f1:c8:9a:a5:36:8b:32:f0:40:ad:
bf:4f:49:ef:6a:49:c9:04:31:e2:eb:02:5a:cf:0f:
34:be:2d:5f:53:34:5b:e8:ce:cd:81:5a:cb:50:57:
87:bc:13:fc:22:69:dd:30:9c:e7:f2:8f:50:2f:85:
0a:9f:f7:96:e7:9b:70:65:06:5d:ce:51:ba:b0:fd:
7a:90:a0:fc:ed:ad:51:f1:53:2d:d7:e9:94:9a:8b:
cd:b1:0f:98:e9:3f:98:d8:86:26:17:ab:d2:e5:3b:
6c:c8:8f:83:8e:1a:07:06:69:b1:e4:6e:46:49:bd:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A5:DC:E2:E8:DC:14:CE:28:79:EA:15:27:77:0F:13:F7:60:ED:86
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:22:96:24:24:ab:11:1f:08:29:6e:87:cc:c7:34:ec:4b:
8a:a1:a0:02:1f:bc:41:7b:0a:c8:2a:78:73:4d:6e:c0:6b:28:
94:ed:55:bd:6a:42:1a:7f:7a:8f:7e:83:f4:f2:de:d6:44:7c:
17:9e:8d:b1:10:7a:2d:82:92:cd:a5:b7:d4:5f:8a:73:e7:50:
fe:86:a7:a4:55:03:b7:d6:3e:60:a4:b8:57:34:7f:e2:31:13:
1c:4a:99:61:ae:6b:cf:ef:f8:24:d8:f0:cf:7e:a5:84:4e:76:
6a:36:46:27:74:90:57:2d:75:6b:8f:38:08:26:a4:d4:08:1e:
73:3a:36:b9:a1:5e:52:5e:5e:8b:20:a6:16:bf:34:42:da:55:
ee:31:a6:cb:4a:cf:59:59:aa:c3:f1:f8:80:78:fe:0b:af:7b:
44:69:94:02:df:c7:9a:5d:4c:52:c8:5e:21:3f:41:6d:ac:23:
89:6c:1b:db:48:08:26:19:17:72:a1:ef:c1:1d:fc:95:76:24:
66:d1:f9:e2:5d:f7:bc:9a:8c:8c:e4:19:15:94:e2:91:c5:38:
09:2a:97:cd:ba:f0:8f:01:01:28:3a:71:3c:fd:a3:9b:21:6b:
e8:b2:05:13:68:20:ae:e3:70:ed:9c:9a:36:02:b5:e1:68:ff:
1a:5a:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:05 2025 by rpki-client