Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: tGNt2YRJ+0ik2lMsECnEOnyUzCVcfd0Zw0pF/y/XflY=
Subject key identifier: E3:83:AC:39:9E:74:13:A3:8C:36:5D:1A:82:EC:70:71:A1:9A:46:B3
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0194BC04C59D7ADE0E9F49C51FEB8242C46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: jn5unil+dOfTsPEF5j6ZnENIdWTkeGq6QW5+ZkUK19U=)
2: lO2EUiNy5Ygni4U4ocj0hRuk3Jk.roa (hash: fuy338nopwX5IC9ItK0YIUtMYQx4XUChLczdkAXvh4U=)
3: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
4: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c5:9d:7a:de:0e:9f:49:c5:1f:eb:82:42:c4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=e383ac399e7413a38c365d1a82ec7071a19a46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:24:2d:67:f8:f4:29:9c:9c:8c:66:c0:b6:
60:a2:64:a7:ec:6c:bb:5e:23:90:e2:ca:b3:90:15:
fc:32:4d:6c:42:e9:a5:14:1b:59:62:80:ef:e1:6a:
94:01:7e:ac:39:96:4d:f9:2f:bd:c7:ed:c2:d8:de:
05:bc:33:4b:3e:7d:a7:06:42:84:b1:9a:fb:e8:96:
20:c5:8f:e2:68:e1:dd:d5:b5:3a:19:e2:fa:46:ab:
13:97:2a:e3:86:f2:ef:29:00:55:6f:68:c4:9b:76:
70:eb:41:55:91:3c:1a:f8:48:9d:b6:ab:8a:72:a9:
91:c5:b0:70:a1:e9:e3:8c:7a:88:6c:40:c4:7f:5a:
aa:65:3f:bc:2c:38:f3:30:28:7a:c2:f9:3b:f7:12:
63:29:1d:91:a7:84:67:e8:9d:e6:9c:55:14:42:20:
00:de:5b:2b:b5:9c:7e:25:e5:bc:92:10:64:82:71:
ff:ca:0e:e8:0b:f4:58:67:6b:b5:b7:b4:06:0b:98:
4e:84:a0:6e:ce:dc:72:1e:ce:12:53:b8:1e:b3:84:
ae:8b:d7:4a:77:70:8c:9e:cb:65:18:3d:01:4f:9b:
fb:2d:6a:33:3a:42:6c:7b:33:4f:0c:6e:de:74:67:
08:1d:bf:e1:1e:b7:e6:d2:4d:4e:32:14:1d:ac:d9:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:AC:39:9E:74:13:A3:8C:36:5D:1A:82:EC:70:71:A1:9A:46:B3
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f9:3e:29:69:c4:b7:4e:3c:9e:3c:af:c8:f1:40:1e:12:9a:
94:b8:9d:40:53:99:e3:e6:98:69:7b:22:6b:c9:33:51:bd:58:
44:ad:a8:69:21:5f:72:ee:e8:d1:cc:d1:59:f3:05:3d:ad:c7:
9a:e7:12:6c:48:db:7d:8c:78:b0:af:0c:5d:6a:5f:56:06:f0:
02:24:0e:ff:c0:b0:00:a1:53:dc:51:34:76:68:38:9e:9a:9d:
e5:11:69:8c:ca:f6:3e:d2:91:e8:d0:a8:a2:8c:3d:c5:ea:f6:
40:85:37:47:06:10:1d:6f:5e:d9:56:08:75:fb:5a:6e:98:79:
37:25:2d:67:3a:3d:31:d8:f1:f2:c2:bf:67:4f:80:ac:81:92:
0e:56:90:44:9b:d9:e9:48:c3:00:b1:18:93:92:a1:8d:85:31:
ae:ee:3e:3d:78:ef:fc:63:ea:5a:0b:31:4b:dd:49:3f:07:43:
04:0d:b4:12:ed:aa:fc:7c:0e:99:22:9f:39:1b:7e:4b:a4:50:
58:63:fb:d5:b6:9e:47:b7:03:6f:88:ab:1e:94:11:18:31:9d:
4d:4a:80:12:a6:ba:79:24:ab:fa:c3:66:be:a7:b5:e5:b6:70:
b1:e0:1c:81:a9:43:38:eb:96:ac:b6:b5:39:99:5e:a0:c2:b2:
e8:80:4e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:23 2025 by rpki-client