Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: e4qLCHL6sIBfPoo+vlkhJOV3x6EF5PRj0OtPg0kquDk=
Subject key identifier: 1F:24:42:4C:6D:2C:A1:E0:7E:34:4A:0B:C8:A4:7D:28:53:09:86:86
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 0194BBCE906FBFB641C72B23857B1D74FB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: G+pTetF2xyhXC+XNfnd5NB+Ycs2VrS50nT3ck47wXi8=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:6f:bf:b6:41:c7:2b:23:85:7b:1d:74:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=1f24424c6d2ca1e07e344a0bc8a47d2853098686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:b3:bf:d4:72:7d:ac:b8:c5:22:3c:ab:38:
47:c4:0f:ad:c8:e8:52:cc:47:34:4c:04:0d:f2:4c:
20:d3:7f:e6:28:1b:7a:49:44:96:d8:b2:13:16:85:
43:41:fa:4b:a4:29:6f:14:9d:63:3f:f2:bc:20:55:
71:db:db:8b:0c:24:fc:b1:7e:93:99:99:e0:21:2a:
8f:fd:b9:2b:23:d1:8d:0c:e3:dd:f9:35:8c:66:1c:
b3:bd:85:23:59:72:3b:3f:35:ef:40:14:7e:b4:d3:
b9:32:8f:34:8d:7e:f4:87:42:84:99:08:84:6a:d6:
7c:bb:04:1e:c1:1c:1f:af:f7:51:a4:1d:00:8c:98:
d3:9a:26:c2:c0:d5:d4:db:83:98:13:c6:b3:c9:82:
49:c7:39:31:78:d1:c3:99:d7:1a:5f:9e:3b:54:c9:
38:c6:56:11:11:a8:f4:e4:88:e0:97:4f:dd:c4:f1:
df:b8:f6:54:97:2f:40:ca:77:5f:a0:67:79:fd:e7:
5f:f1:67:98:29:1a:f7:6c:46:c5:3d:cb:68:0e:67:
49:61:0b:ee:90:f1:bd:1b:83:bd:ee:75:97:e7:47:
2a:55:14:d5:50:e7:24:84:f9:37:9e:cb:66:75:c6:
0b:e5:87:4a:55:d1:98:15:73:c0:02:15:64:65:58:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:42:4C:6D:2C:A1:E0:7E:34:4A:0B:C8:A4:7D:28:53:09:86:86
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:92:90:12:eb:f4:69:22:14:f2:2d:e2:0b:18:87:da:4f:79:
6b:34:d4:43:fb:f7:9a:d2:0f:8b:dc:9a:1d:ad:6d:79:ad:c3:
18:4f:ff:4c:dd:93:ee:db:bd:7d:3a:06:77:bc:53:c5:3d:a9:
19:fa:df:eb:8f:44:74:1e:d5:9d:40:23:6e:09:e6:6b:c4:0d:
b3:94:cc:73:ff:34:2e:bb:b2:c1:f6:03:51:c4:ff:da:70:c1:
82:c8:5e:0e:55:6e:10:48:d3:12:e3:90:7a:7c:34:68:2f:93:
29:6f:3f:57:b1:b2:bc:1b:b2:44:a1:5d:b6:9f:15:b0:cd:b7:
5f:a3:7b:c3:71:39:96:ea:58:79:f3:0f:0a:d7:13:fb:21:66:
87:f9:67:04:92:4a:60:b1:04:73:aa:55:96:0c:bd:38:52:e8:
9f:c8:3d:c4:d6:52:91:63:72:8c:b4:82:90:59:9b:9b:69:1c:
43:d9:5b:c0:4e:2e:a1:3a:a7:7d:ba:22:f0:70:11:2e:3d:c6:
a9:04:a9:9a:95:18:08:c6:f7:54:d8:30:8f:25:2e:f9:bd:d0:
9b:6c:3c:c7:b1:b7:18:22:10:27:4a:56:87:7e:d1:f9:f9:eb:
d1:a2:e9:9d:04:d9:55:ab:7e:28:0d:15:2e:fa:ad:09:01:76:
65:c1:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:22 2025 by rpki-client