Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: hZLA3W79wK1DGJZ0U17QulkHJybEKgYGGoN83dgw7Lg=
Subject key identifier: FD:79:BD:E3:72:55:33:AF:1D:70:55:F0:BA:8C:81:86:70:4B:0F:3A
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 0194BD854EDA6FE9E8F068595E8261504446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: B5
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: 82opSv9fpwdODIwJ8JVhVaQDkYugu7VpZuY4rfF3Jtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:da:6f:e9:e8:f0:68:59:5e:82:61:50:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=fd79bde3725533af1d7055f0ba8c8186704b0f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:c7:e1:02:d6:04:d6:38:ba:06:3d:56:66:
4a:1a:cb:b6:13:e2:f9:8f:cb:a4:4b:c5:a6:25:f8:
40:91:d6:19:71:a8:65:ee:0b:d7:6b:6e:a6:ac:65:
59:ae:05:02:26:a4:7c:09:05:9d:a8:42:79:d5:77:
dd:47:2d:18:da:a1:83:9f:92:d3:a4:ea:50:d4:5a:
30:3c:f5:c9:15:68:21:2f:21:c4:5b:fe:ca:f7:de:
0e:ba:42:d8:30:b0:2e:98:b7:79:43:8e:30:79:42:
71:41:53:8b:ae:0f:3e:aa:78:2b:e2:b3:ec:a0:62:
3e:ad:7e:52:34:47:96:2b:d0:09:e2:9b:cf:49:8b:
11:9e:10:05:2d:73:45:30:27:27:f2:bf:23:3c:3f:
fa:4b:50:fd:ee:d3:5c:15:0d:99:24:f5:df:b2:82:
62:a8:3c:ae:1e:d0:bd:33:34:16:d7:00:97:cd:e5:
84:5a:79:d0:a6:31:52:2b:71:e5:e2:8a:ff:79:97:
e9:1d:18:b2:d1:a5:24:8c:a5:e4:44:c5:2f:f6:e2:
bf:ff:35:0c:f8:54:45:7c:38:fb:59:80:1a:5b:40:
7a:22:03:4f:c4:dd:93:cc:75:c1:1e:03:c8:64:fd:
37:fd:ce:97:db:59:b7:2b:60:c5:78:e1:13:c4:86:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:BD:E3:72:55:33:AF:1D:70:55:F0:BA:8C:81:86:70:4B:0F:3A
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:c0:f6:64:8d:26:7c:ea:a5:1a:18:84:e6:0c:c8:ff:c5:
b7:44:bd:07:42:d9:81:f2:ef:10:64:6a:3c:b4:4d:44:84:31:
8e:47:27:b2:b8:f2:09:a3:2c:73:6c:8b:ca:cc:bc:3c:f8:cc:
2e:80:dc:d4:ed:91:e8:aa:21:60:9a:5b:90:06:a1:7a:19:13:
c0:85:1b:a7:50:0f:b4:1b:f7:d8:1f:63:8a:bf:0f:72:9e:c5:
d6:54:0d:6b:c8:f0:ea:a0:05:b0:02:b8:32:75:c0:82:fe:ca:
c4:bf:12:82:75:98:49:64:8f:18:82:7d:bc:e8:47:f0:3c:5c:
2a:a3:93:16:46:66:9b:ea:be:4b:43:b6:fe:eb:cc:c5:69:53:
c5:9e:b5:05:c1:92:8a:66:42:8d:28:05:21:c9:d6:7b:ad:09:
c0:e3:50:41:3f:34:39:38:3e:c7:2b:74:b7:bb:b5:cf:93:ca:
6f:63:49:be:c7:6a:e8:b9:de:6f:c5:5a:1f:7a:bb:3c:76:2d:
1f:77:2f:fa:26:ee:e5:62:84:06:11:5b:d2:60:eb:23:29:10:
f4:22:f8:ed:2b:bd:6c:42:ea:74:66:b2:4f:97:47:9d:1f:3a:
c4:31:50:27:f3:cb:f2:4e:94:ba:b2:0d:ab:c0:13:a4:58:23:
35:a4:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:55 2025 by rpki-client