Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: FkkqOTmpG/T5T6PWKZfqr11rHP8feO7tTcBOug3/RJs=
Subject key identifier: 4F:B7:05:A1:8C:4A:71:42:3B:97:42:09:43:25:EB:13:AA:71:85:F7
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 0194BC04B8849B33828C2811B33590E8A882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1130
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: /oaeFHE8KX3fbALKPYI5OZY1x+lNFcCHsTqG5pSIxv4=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:84:9b:33:82:8c:28:11:b3:35:90:e8:a8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=4fb705a18c4a71423b9742094325eb13aa7185f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:4a:0a:1c:d4:8a:eb:df:48:61:15:6b:6f:
6f:a0:13:d8:3b:5d:20:1b:6d:04:60:84:a9:28:20:
2e:7b:c6:55:e4:68:92:a8:79:8a:f9:df:06:da:4d:
11:28:67:3a:fb:54:59:8a:d1:05:b1:dd:99:64:47:
de:e3:34:bf:f0:78:a1:36:63:65:58:16:3e:85:52:
ba:af:e7:68:e4:07:6e:ba:cc:d7:84:3c:f8:74:c5:
85:66:24:18:13:ed:eb:59:af:bf:5d:a7:1c:8b:82:
8f:44:f3:70:38:b3:56:07:dc:21:74:56:8e:e9:8e:
e5:fc:74:d7:27:8c:49:f9:e0:aa:86:71:5b:a7:70:
7b:97:90:f4:c7:a7:60:c6:a2:bd:f1:44:e6:f1:7b:
f0:ce:c5:fc:bb:e1:82:a5:b3:4d:e6:4d:c3:7a:0b:
b7:b6:2e:d1:8f:f7:33:e4:37:7e:31:8d:a8:69:26:
39:f5:22:06:c9:5c:3b:b1:ef:68:b5:94:36:3a:ca:
26:df:6d:da:1e:e7:ad:96:75:8c:b3:bc:40:e9:1c:
7d:a1:06:91:a7:f3:37:71:0d:06:5b:51:85:c5:bd:
da:9d:1d:5d:97:b6:63:2e:a8:f0:bc:3c:6b:b9:79:
d4:77:20:02:4b:23:99:09:1e:52:60:2f:bc:e4:4c:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:05:A1:8C:4A:71:42:3B:97:42:09:43:25:EB:13:AA:71:85:F7
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:8c:4b:56:a8:57:13:46:e5:ab:c6:70:72:c4:3f:ec:70:
e4:c9:66:46:51:9b:6c:c0:95:ba:e5:e4:82:7c:27:1d:ab:67:
59:93:b1:ee:61:6f:02:70:49:95:3c:fd:23:09:a3:60:ba:88:
e0:43:39:31:eb:ee:a1:9b:cb:22:c1:b3:c2:11:b5:e9:c0:ae:
d0:0d:00:41:52:a8:c9:6c:28:8c:49:db:17:5e:ea:2d:22:cf:
30:3a:7a:24:bb:23:9c:54:dc:39:74:73:ad:22:2b:a3:1b:87:
de:d5:e1:ce:b5:3c:a3:b1:c8:a0:c4:2b:6a:8c:f2:10:57:9c:
7b:a9:c3:ec:02:0a:c3:8d:e2:9c:eb:4a:2f:8c:57:bf:27:db:
8a:72:2d:34:d0:13:3d:f9:89:43:72:0a:9b:4c:60:0d:95:bb:
91:47:91:4d:e6:75:e1:44:c9:12:2f:71:90:33:43:7a:e6:cd:
8c:42:bf:47:8a:e7:9c:bc:08:b3:93:91:4b:19:40:8a:96:d0:
95:cf:f2:f7:c8:22:cf:df:49:64:5e:7d:bd:53:25:44:c7:28:
46:9e:4d:ef:af:4f:99:2e:5b:b3:9c:a6:94:eb:29:e2:34:d6:
cf:02:15:cf:ae:7d:11:2c:57:74:63:6d:23:d9:71:fa:fa:50:
13:93:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client