Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: ZkcZfatniS/PAS8spArx82x9/h9HQ16/+rCwg1B/TN0=
Subject key identifier: 32:1D:E3:8B:41:B6:F7:53:FB:00:60:B5:8C:B7:9F:28:57:A2:8D:8E
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 0194BBCDE677755DC595DBEFED7DAA13464B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 137E
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: 3gUQQTU65rN2KTQt5Ax34h5jywf8/ulXF/u3VGkHF3c=)
2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:77:75:5d:c5:95:db:ef:ed:7d:aa:13:46:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=321de38b41b6f753fb0060b58cb79f2857a28d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:ac:e1:a8:c2:27:49:c9:f3:8a:93:6b:96:
a2:99:69:94:43:02:2b:db:93:4a:05:86:62:a0:10:
81:de:73:c8:64:79:25:50:93:93:8a:a5:4a:fe:8f:
b7:a2:d4:8c:50:b0:2c:2f:ff:72:2a:0c:3b:59:8c:
22:a5:12:7d:e2:b1:58:30:31:3a:bd:a2:65:d8:3e:
9a:df:55:64:4f:03:60:60:8f:69:0e:2e:e6:82:11:
4e:34:fa:fd:1f:b8:6b:d8:49:81:ff:0a:c5:a5:3f:
ef:16:70:b9:52:aa:f6:3f:2b:f1:c1:03:2c:8c:59:
5a:9b:90:9b:e6:44:af:59:9e:ce:b3:8b:8f:fa:ad:
c4:03:fa:cf:d9:4b:96:20:15:cc:cc:0a:28:da:48:
37:d7:6c:33:08:f8:cb:4b:51:39:20:87:8f:c9:c7:
23:38:3e:6a:3c:e1:f5:53:33:ce:05:3f:e0:2d:7b:
0b:d1:82:5f:5a:25:79:dd:be:41:68:ad:40:aa:c5:
55:55:96:0d:88:52:ec:93:38:ca:c7:33:48:00:4b:
22:6a:b0:3d:d8:6b:82:00:a7:be:59:b2:5e:d7:10:
66:53:f2:81:5f:54:a2:dc:79:75:b3:66:d4:07:d7:
78:25:5d:85:40:44:68:6d:19:cd:2f:04:9b:db:df:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:E3:8B:41:B6:F7:53:FB:00:60:B5:8C:B7:9F:28:57:A2:8D:8E
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d0:db:ee:91:36:18:ff:f1:58:7c:15:cb:50:28:05:b5:97:
2a:79:98:8c:90:ff:2d:e7:be:8c:9d:b5:2e:86:5e:60:05:6d:
40:b6:5e:f0:ba:4d:82:97:60:94:17:cd:ce:42:80:0f:57:ad:
8a:c4:d2:bc:f7:f4:3e:be:65:a9:c4:d3:00:05:28:d9:7a:e0:
32:24:b3:cc:7c:da:a3:ea:b1:1f:fe:c1:b7:b7:d1:8b:77:c9:
11:ae:da:56:ea:26:16:5a:d8:b3:7a:3d:e4:df:b8:96:e8:09:
13:f4:12:bb:c7:e2:f7:a3:94:26:88:8a:02:9c:9d:40:08:dd:
c2:90:14:3f:09:99:6b:46:98:12:85:c3:26:55:cb:75:e0:45:
b9:8b:2a:7a:b9:32:5e:5a:16:fb:e8:0f:23:cd:d9:ec:f3:6b:
5d:9d:9a:92:4a:ae:76:e3:cb:6b:7a:84:46:a3:27:06:be:20:
d0:dd:a6:6c:a9:09:1d:0f:8c:06:00:3a:ca:90:82:54:64:07:
92:a4:aa:ac:9c:1d:c5:41:ff:2b:e6:2a:2d:7b:a7:5b:cf:6b:
a3:54:dc:cd:86:fa:77:d1:97:dc:7e:71:4a:20:52:75:d8:76:
00:a3:61:0d:ab:be:8d:75:b5:08:b0:f6:c9:f8:6f:3b:8e:9e:
2d:76:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:14:01 2025 by rpki-client