Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: +mGuGRRo5nOib6xw/qoB7Z9rShkAxE9wTIMBWRmfKxM=
Subject key identifier: 34:0A:8C:37:A8:81:DE:0D:52:69:89:9C:1A:A6:D3:9A:7A:50:F9:E9
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0194BD17BFAB6901199B026D9857161D8AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0851
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 9y6LZjFwfSoaqNRT2uqBoPJcvVY.roa (hash: uAmzZvl864RqOnfyS3++PEw32TTeE1zwbdmu/WZcxpw=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: A4441lOt2aLBo/Nr8GEF4Hr6kNyt1p4KdTdOeYRvqCc=)
3: lq2jSay1tA6EQwiYjCYq1wVBPlQ.roa (hash: DCGKuVdB79polnMIdtkaoruyPf4zaLO+YiQJ2w+H6qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bf:ab:69:01:19:9b:02:6d:98:57:16:1d:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=340a8c37a881de0d5269899c1aa6d39a7a50f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:b0:64:69:8a:8c:6a:1a:8d:6c:bf:88:7f:
66:7e:86:8f:26:74:b2:f4:1f:e5:ec:9c:4c:35:bd:
f0:b3:3e:ac:56:35:42:76:51:cf:93:cb:6f:49:bc:
15:58:bd:f9:89:01:b7:20:dd:06:8c:2d:1a:a6:54:
55:93:06:c4:9b:c0:86:ff:b8:8b:2d:d5:90:4a:5d:
32:5d:cd:40:a5:82:be:7c:1a:a4:0c:18:be:c2:94:
99:a6:5a:48:89:08:29:d8:b2:bc:3d:0d:64:26:1f:
4d:34:21:1a:4b:e5:ff:54:98:49:9d:69:da:91:42:
a8:bd:f8:06:ef:06:bc:b7:2c:62:7f:64:d1:0f:84:
db:15:7d:c8:7f:02:da:b9:84:24:ea:d7:e7:91:f0:
f4:4d:fa:fb:1d:3c:71:84:c3:da:65:8a:f8:69:5f:
3e:28:54:92:45:5b:ae:ed:f9:49:b9:06:33:13:4a:
90:cc:1b:f5:60:6e:6f:ff:04:90:aa:b2:48:c1:bb:
f1:73:6c:f7:cf:85:ec:55:cc:51:ee:23:18:16:f0:
2f:a8:4c:34:5f:8d:7b:62:69:38:8b:5b:b6:2c:9a:
fc:c8:3c:00:bb:89:0c:7b:12:5c:83:d9:b7:13:dd:
a6:82:34:d7:ac:f2:3c:dc:66:46:0e:83:97:39:1e:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0A:8C:37:A8:81:DE:0D:52:69:89:9C:1A:A6:D3:9A:7A:50:F9:E9
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:ea:f3:a8:0e:17:97:53:b7:67:eb:b2:57:72:d8:c1:c8:
b7:5a:31:6d:8a:c7:45:31:72:ee:14:71:8c:ad:11:be:f6:15:
68:07:bb:4f:7a:2f:e8:8b:c1:31:3d:b8:a1:4d:f9:ac:61:5d:
af:fe:09:68:3a:1d:66:eb:7d:d3:07:90:27:65:71:2b:64:59:
9f:65:81:e1:8d:41:2e:db:cc:10:35:93:b4:fc:19:b2:19:d6:
6f:58:32:ef:c7:27:e0:56:48:12:18:3c:7b:36:1b:2e:34:f0:
f0:63:6e:e6:02:c8:58:17:02:ff:40:58:6e:cb:02:32:d3:34:
98:3d:e5:f5:d5:04:7e:c8:b8:9f:d1:aa:53:d0:cf:02:3e:04:
97:3a:17:12:51:47:18:0f:67:35:9d:6a:9c:e5:81:d5:77:6e:
e7:2b:0a:be:21:87:5f:7b:c1:ae:57:6e:80:8b:ac:04:11:75:
2b:59:fb:31:8d:06:0c:be:50:46:7e:a2:89:f0:10:28:f3:0b:
ff:d5:4c:25:26:5b:ff:7f:29:21:6b:5b:7b:fc:05:04:d0:2c:
a3:3e:4e:c4:81:b1:51:4b:89:98:59:90:c8:6d:fd:23:70:92:
46:f9:dd:b0:be:6e:e4:92:79:54:f2:f2:3f:15:e9:f1:71:bd:
9f:56:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:01 2025 by rpki-client