Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: RbYKFimcjuE1giDGVqzE0lgzdFze64dOKTrh2HCJZbo=
Subject key identifier: 3C:C6:5C:CF:81:CC:AF:CF:7E:72:9E:60:6F:A1:66:32:78:D8:21:57
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 0194BD178E81A539E7865A529EA12CAE25E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 0276
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: qpA0n/C9WUJov66J8tFLnQ3B9oKw5FVIPqqOFonkVp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:81:a5:39:e7:86:5a:52:9e:a1:2c:ae:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=3cc65ccf81ccafcf7e729e606fa1663278d82157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:cd:93:0e:26:e4:27:8f:b1:4f:37:ba:c1:
4f:f7:51:42:ed:28:b6:04:a6:70:ff:54:c1:e9:eb:
42:5e:e1:f8:c8:df:24:4f:a1:9d:6b:3e:c7:f7:14:
cd:0a:fa:ed:2d:18:c2:cb:49:20:b5:c7:6c:d7:a3:
3f:b0:41:df:41:a9:ca:45:4c:a0:40:47:9e:c0:da:
d1:5e:e2:cd:37:23:0c:28:1c:87:97:55:68:1b:88:
b4:57:4d:3d:98:9c:7b:97:f6:f1:13:3c:f5:d4:1a:
87:82:6b:e7:6b:80:9f:6e:48:2f:fc:65:ea:8b:3f:
4c:0f:eb:15:55:35:6f:91:64:bb:04:5e:d8:c3:9c:
5f:61:cf:27:ea:c3:0f:bb:8e:b2:6a:b5:76:9e:ff:
6d:05:f9:16:e1:9d:89:50:fa:17:b0:86:10:4d:a3:
d6:70:c6:de:fc:47:f4:2c:0c:96:64:28:d6:8c:37:
03:10:bf:d7:55:25:c1:ce:15:f8:74:e6:41:99:b7:
63:38:f2:12:af:f2:fb:b3:78:a1:50:3b:04:79:61:
b9:8d:d1:76:40:a4:ea:6d:26:b5:d8:85:96:bb:57:
42:ec:ce:8a:e1:ac:09:09:d3:f4:d2:b4:35:94:36:
b3:6b:82:9d:db:b0:da:67:b0:99:8b:4f:7e:5f:bf:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C6:5C:CF:81:CC:AF:CF:7E:72:9E:60:6F:A1:66:32:78:D8:21:57
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:19:75:17:03:f3:43:f6:63:e2:95:d1:37:4e:ba:38:84:e8:
c1:5b:41:05:b8:59:cc:14:02:55:e7:63:13:69:4e:b0:d9:1f:
eb:4b:73:fd:59:fd:d0:08:01:c4:06:9b:c6:40:13:32:e2:e5:
f4:b8:5e:f4:fb:2f:65:4d:4b:9b:21:dd:8e:47:71:21:9e:17:
7a:37:9a:55:a3:2c:22:5e:ba:1c:52:93:e6:25:c9:25:64:4e:
95:3d:b1:8a:d7:b3:b5:d7:b8:61:e1:91:6b:a1:5d:4c:78:ca:
51:4e:41:5b:e7:5d:06:7f:1e:22:e2:a2:fa:20:fe:6b:24:63:
b7:dc:d3:19:d3:6e:33:e2:d6:15:11:ac:18:eb:7c:9c:ff:1d:
ba:d0:ba:37:f4:7c:34:75:2b:4d:02:cd:81:81:45:5f:65:4a:
ac:37:92:21:0f:2f:e7:20:74:74:d2:b2:e6:3d:4c:08:d1:ba:
f2:f9:62:27:50:c7:23:2b:e4:2b:3b:73:f4:76:0c:34:07:f0:
87:49:23:45:8c:78:66:cd:b4:77:1d:7c:cd:1b:95:e7:21:b6:
0c:90:22:9f:bc:c8:4f:0f:29:0d:28:73:f5:0c:87:ba:16:67:
0b:72:63:56:1e:4a:ee:7b:03:db:e3:9b:8c:70:3b:27:59:c8:
92:03:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client