Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: 3XQC/rSiALHUuAeHy78X+iExnfU0tOf12gi8QZaJ++o=
Subject key identifier: 1C:FB:78:14:2F:B6:5B:3F:59:A3:5F:BF:C0:B6:B3:A7:44:80:D1:13
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 0194BBCE00B8A26354721CC1B73FFCDB54A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 12C4
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: D4t4Q2E1aOQqesZoyyITPPw//3iuByt1840InlAtlbw=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:00:b8:a2:63:54:72:1c:c1:b7:3f:fc:db:54:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=1cfb78142fb65b3f59a35fbfc0b6b3a74480d113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:fa:5d:e5:b0:40:f9:ef:05:e1:50:c2:40:
79:8d:00:62:78:60:09:90:c7:77:8c:35:55:6e:e5:
9e:1d:8b:ff:86:48:2a:15:85:33:e7:8a:0c:be:1d:
76:ae:a3:8e:73:c7:eb:2e:72:6d:c5:43:2c:65:7e:
ef:ff:e4:ad:be:6d:6c:3f:13:47:d9:da:a3:70:45:
4a:93:6d:85:b5:e4:a1:8e:12:14:79:c4:6e:d3:d4:
aa:da:da:6e:48:b1:67:a6:cb:f3:4c:9e:e4:1d:86:
a1:f8:53:55:4f:ed:d4:ec:44:e7:d7:8c:9d:5a:e4:
42:11:7b:09:73:d3:44:47:44:14:55:df:f9:f2:62:
9e:bf:d2:c8:34:3e:44:43:e0:84:19:f3:40:a7:a5:
3a:66:db:01:5b:01:64:e2:1b:2d:c9:3f:0a:16:b4:
98:36:23:79:72:37:e4:87:07:51:17:7a:da:a3:9b:
6f:ca:f4:eb:e5:ad:0d:0e:48:2a:89:9c:56:5a:86:
41:c1:a2:86:1f:40:85:13:56:6b:0c:d5:b7:27:f3:
18:75:1e:c2:09:0b:21:fc:2b:2c:97:37:f9:ca:f7:
e6:20:91:a2:bd:0e:f5:fd:47:b2:37:e4:21:07:2b:
5e:90:07:0b:13:60:e8:f6:c7:24:a5:54:63:74:dc:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:78:14:2F:B6:5B:3F:59:A3:5F:BF:C0:B6:B3:A7:44:80:D1:13
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:35:3e:83:1b:a4:89:b8:d1:8b:fe:cd:32:58:a6:17:9b:90:
f5:51:a9:0f:8b:13:7a:51:45:42:20:11:ab:28:59:fc:a8:64:
0f:45:a6:81:b7:21:e6:0c:5c:82:1e:cf:58:d9:20:b9:61:83:
b1:fc:30:b1:74:3a:c4:73:12:3c:5a:92:78:f8:27:b0:f7:da:
e0:8e:82:70:f5:29:ba:ac:21:1f:85:fb:78:a7:f3:47:2a:a2:
af:20:a5:e6:72:ce:b1:dd:22:db:cc:6c:7a:a6:49:c4:2f:a5:
23:ab:ea:40:90:ef:3b:38:75:9d:1e:07:a7:e3:d2:bb:9d:ca:
d9:b6:fd:99:70:75:f0:74:12:f9:80:8d:55:97:a9:5c:18:d4:
27:92:99:5f:b0:c8:6e:95:f3:a3:79:88:50:a1:95:91:78:db:
8d:2b:e9:d2:4f:f2:0f:ec:80:f9:f4:8a:d9:cf:ba:03:d8:ad:
27:93:56:0e:dc:b0:0c:25:37:ef:d7:ce:d3:15:e2:46:0d:57:
6c:88:d4:41:74:f0:e0:59:1f:0f:a8:b8:25:1e:d3:9e:2d:eb:
ed:46:79:98:fb:2e:84:62:b9:9a:7f:bc:00:68:a4:31:ed:50:
5b:7e:71:4b:36:3b:ce:e8:d3:88:d7:97:f6:28:64:33:b0:f6:
67:08:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:46 2025 by rpki-client