
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
File: QoWCG7eoRF779DPUwZiQp_qUn6g.mft (raw, json)
Hash identifier: ukSYlflrraXlBXF2DKJgbTzvjEFlMHPcrMLtA8ASJbs=
Subject key identifier: 69:7E:CE:C2:DD:4F:AB:0E:BA:4F:A9:F1:EA:29:EE:B6:E6:02:B4:13
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 0194BD8562E955DD5858B44ECA3D26DCEE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
Manifest number: 0DAB
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: NpEQQ6T9aVptT2KcAU9qB9-deTo.roa (hash: V25DurbdNpjhByTtNYzzliIkfyOB4iKBrQpwxulmxQk=)
2: QoWCG7eoRF779DPUwZiQp_qUn6g.crl (hash: Sd99hwgejWKBntFxgO4sXrQTNlToH3nVbHpJShsCw8c=)
3: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (hash: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:62:e9:55:dd:58:58:b4:4e:ca:3d:26:dc:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=697ecec2dd4fab0eba4fa9f1ea29eeb6e602b413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:f4:68:b3:06:f9:e9:98:0d:b7:fc:dc:77:
0a:ee:3b:0d:12:20:1a:ed:09:66:6e:54:9c:f1:0d:
ce:68:fd:06:4b:cc:a0:3a:34:83:66:3f:06:d6:47:
b9:a4:53:2a:1d:20:75:41:00:23:6b:c5:f4:8e:7e:
77:92:bc:ab:b2:5b:df:73:b6:15:0d:00:b9:1e:7a:
99:26:4a:3f:9b:7f:b0:d3:78:48:41:98:ed:b6:3c:
82:81:2a:42:6b:18:76:56:84:1c:e6:4f:a2:d7:31:
ff:1d:d9:c7:32:5f:4b:91:dc:0e:fc:d6:d2:a1:c7:
17:02:fb:fc:98:c3:38:ea:01:48:2e:5b:27:03:87:
b5:e8:9c:ad:8a:e5:93:7c:10:e8:2a:35:69:ce:3b:
97:14:27:0a:58:64:c2:03:39:b6:50:b7:f3:ff:48:
6e:e9:81:ab:f3:2a:95:83:34:4e:40:08:dd:91:97:
ce:51:22:35:09:b2:ab:82:51:f4:70:e9:b4:7c:60:
ed:aa:36:6d:92:89:03:11:aa:f0:df:7c:d2:ad:8f:
d2:59:60:c7:ef:f7:e7:4b:0e:66:6f:ff:66:47:89:
2b:ad:4f:35:e0:df:37:de:b5:8a:a6:fc:f0:24:73:
cb:27:12:42:81:0c:39:5d:69:3b:d6:8e:74:61:df:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:CE:C2:DD:4F:AB:0E:BA:4F:A9:F1:EA:29:EE:B6:E6:02:B4:13
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3e:e8:4c:d1:1e:d9:8d:5f:33:ee:0e:fd:30:5f:54:d2:a0:
03:05:bc:ab:89:e6:51:4e:f1:70:17:a0:c9:6b:fa:fb:7f:3c:
a4:6c:61:e7:13:7a:9e:cc:a6:88:12:e5:c1:31:aa:04:77:15:
87:b3:b9:96:12:b2:ff:c3:e0:d7:1e:2d:4a:3e:e4:0f:20:63:
42:9e:36:b8:02:c6:ba:37:fd:b9:4f:72:61:e3:f7:48:0e:65:
e0:47:02:2b:c1:88:ac:ba:e5:d5:f2:52:a3:2c:b4:18:ef:a6:
30:4d:4d:81:81:11:aa:16:cb:53:18:7d:a1:6b:81:98:aa:65:
a4:e6:80:70:31:ad:bf:67:26:a4:81:f9:3e:80:2b:e1:5f:eb:
63:8b:6b:43:b0:63:ef:75:f4:b6:26:1b:8b:37:1d:1f:60:5e:
49:25:3e:b5:8e:c0:68:a8:e9:b8:57:1c:e9:99:e9:fd:22:14:
87:13:17:d9:f1:75:6e:a5:01:37:04:25:0e:1d:7a:f4:44:e3:
ba:a5:ba:b9:21:b2:1a:45:b0:ec:b9:7c:29:cb:45:80:2e:e1:
fe:7c:38:60:0a:fb:1b:f5:d8:f5:ad:ed:0a:a3:3d:c9:f9:f3:
6b:32:d1:e5:41:e8:98:91:bd:8a:88:a9:17:43:c3:c0:cf:0d:
e1:27:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:42:45 2025 by rpki-client