Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: Hn5iZ1pslSV26TyPPeY/jX+dRCaH0et0oP3unqUsY48=
Subject key identifier: 95:B2:A1:5A:FE:42:CC:B3:98:41:EB:F9:E5:03:E1:E7:94:B7:A3:38
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 0194BBCF093E5F0433F2854FF854989546A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 12B2
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: 8xvpS5lOo/2zP4IUd7ohwHRHFEbcagr9mFiZS1KMIrc=)
2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:09:3e:5f:04:33:f2:85:4f:f8:54:98:95:46:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=95b2a15afe42ccb39841ebf9e503e1e794b7a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:73:74:4e:fe:be:15:1d:de:18:6f:b4:e1:
02:90:96:00:eb:52:85:96:e9:17:61:b8:b3:fd:72:
a8:fc:d2:61:94:93:d5:39:51:86:6e:d8:0e:f1:c1:
ed:fc:4c:fc:56:55:e3:6e:a3:d4:55:03:a7:ea:a9:
ea:2d:10:d3:28:ef:7d:59:b1:66:9e:79:18:77:96:
0a:32:1c:ac:3f:d8:7a:4f:20:f0:b0:9d:8f:ac:d6:
76:a3:cb:b2:e9:b0:d8:12:48:b4:85:ec:3d:ec:3f:
ec:14:4b:cd:ca:7a:46:ca:a2:93:f3:03:ed:78:ec:
23:a6:30:59:e2:22:c6:35:74:1a:9a:24:5d:c6:b3:
49:35:ff:47:09:e9:ed:69:9e:54:a6:36:c2:19:cd:
72:29:ce:98:f6:e1:a9:b9:43:95:0c:f8:ff:4f:13:
23:14:26:89:33:4e:d0:ad:be:a7:1a:e3:a3:79:f8:
27:e1:7c:a2:80:42:f6:09:13:ce:02:48:ee:57:7e:
10:b9:1b:45:10:4e:f3:c2:45:00:d7:52:c3:3a:ac:
20:b3:c1:2f:16:43:2a:fe:13:04:62:1b:60:70:c5:
f2:5d:c1:90:80:f1:b2:a3:a1:a8:b3:53:72:86:b9:
6c:cd:59:1f:89:e2:1c:c6:a2:8c:6a:be:1b:9a:b3:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:A1:5A:FE:42:CC:B3:98:41:EB:F9:E5:03:E1:E7:94:B7:A3:38
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f3:39:b0:40:f9:1e:4d:ea:b0:82:c3:f3:1c:e0:52:0e:3d:
c6:6d:61:f4:89:6e:75:cd:e8:b8:c1:1c:c9:bc:6e:c1:6d:fe:
17:ad:b6:95:ed:50:5f:e0:69:4f:6f:73:84:b4:e4:6d:2b:8e:
cb:b3:e7:54:d2:2f:c3:aa:00:bf:c0:84:7f:ee:29:e0:39:03:
c9:68:1b:c4:3f:4a:d0:58:1e:c8:c1:d0:d8:4d:4c:2f:47:3b:
97:79:6d:e0:2b:8c:17:8e:45:3c:76:a9:39:f2:c8:6c:7a:5b:
0d:92:16:2c:5d:ac:fe:63:9b:45:77:4d:31:08:87:a7:3c:54:
4a:89:85:a7:a2:d1:b3:d0:7e:1a:fb:30:a7:5d:5e:57:4b:59:
ce:d4:62:b6:21:5f:01:89:60:02:3b:cd:2c:c8:85:af:b5:ed:
3e:49:e9:7c:62:78:b0:98:b7:f6:c3:cc:1a:d2:10:b2:47:c6:
1e:87:e5:a7:c5:ba:f6:e8:34:f7:3a:48:5d:c9:27:d7:cd:61:
f9:8e:b7:3d:48:61:8b:df:c9:ed:40:06:0b:a5:d2:84:c9:1e:
79:3a:4e:24:b7:b2:c0:8c:31:45:e4:ed:bc:6a:39:9e:c3:98:
8f:09:fb:da:6a:2c:2d:d8:78:fa:67:69:4a:a0:2c:4d:b8:56:
64:96:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:29 2025 by rpki-client