Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: vdE6SyUljdvaoTRlZrF4WY39h7K8axL5q+mdqBePc+M=
Subject key identifier: 0C:94:1B:9E:27:B7:37:79:85:EE:86:39:8E:29:84:F8:BA:98:BD:F3
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 0194BBCE57FF5A0E051727E455BDC717AA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 01D5
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=)
2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: OiBvS9DDa2Cmo5xB6vkppLcLXfRpYdZ/JxJ8TVTQ2aw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:57:ff:5a:0e:05:17:27:e4:55:bd:c7:17:aa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=0c941b9e27b7377985ee86398e2984f8ba98bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:ea:e3:51:02:5c:d8:c2:db:48:70:57:e3:
02:fa:43:41:36:35:66:4a:f0:78:47:2e:eb:42:e9:
5f:bf:32:29:a9:f3:9e:ff:4a:08:1c:5a:ae:80:72:
4c:71:72:fd:84:a7:f0:b3:4c:7a:c9:e3:a2:b8:45:
a2:85:ec:4b:7c:a1:1e:16:46:f3:1b:a4:ef:11:2a:
7d:28:91:91:43:32:cb:3c:4e:94:bf:6a:cf:b6:d3:
a7:76:34:cd:df:da:c5:9f:3a:41:a2:2c:6d:a3:0c:
39:d0:69:05:39:a7:e3:08:98:52:2c:47:d7:92:f6:
22:8c:a0:83:78:6d:f4:56:af:76:80:64:7d:d6:cb:
84:ce:66:96:12:c1:f2:5e:b3:cc:de:55:d9:06:60:
6d:51:05:76:8b:68:46:a0:07:92:28:d8:4e:17:77:
42:a5:b9:bf:34:c3:16:3e:65:b9:0c:1b:ca:c1:22:
da:31:5c:cb:ef:94:a7:b6:42:b6:ed:9e:43:7d:16:
67:51:00:69:43:83:d5:ee:41:31:23:e8:f3:6a:a9:
da:74:13:ac:cb:94:49:de:57:d6:98:d0:7c:3e:aa:
f9:b4:99:5a:a5:40:8c:3b:f9:6c:18:28:2f:61:2a:
c8:fc:2e:05:49:79:6b:67:48:d4:bd:ba:06:8f:88:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:1B:9E:27:B7:37:79:85:EE:86:39:8E:29:84:F8:BA:98:BD:F3
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:67:51:9d:df:f1:22:3e:b5:2d:92:47:5b:78:6c:0d:73:
0f:b6:98:83:9f:fb:3a:bd:e8:df:cd:99:ed:64:81:8f:fc:ab:
db:76:22:98:4b:7b:f7:cd:a9:3d:d1:c3:db:40:35:66:27:aa:
d2:40:06:de:51:11:7e:5d:60:54:a4:e3:56:ef:0b:15:2f:38:
cf:cc:ba:39:fe:91:7e:ee:8f:1e:1e:bd:30:6b:65:80:b4:3f:
cf:f1:df:8a:64:f3:d7:10:72:4d:a7:66:43:e5:16:0c:ba:48:
b5:2b:13:56:72:e6:08:d8:3a:81:a9:99:a2:50:2a:b7:18:01:
88:34:ad:c5:7d:82:20:d1:7b:e0:d3:1e:1e:17:dc:67:fb:28:
c8:7d:16:f0:49:52:90:69:6e:29:0a:b4:96:cf:48:b6:bf:e5:
d0:4c:79:e3:2d:39:a9:9f:d4:ba:75:34:05:32:39:f3:ba:2d:
27:74:d1:b4:0d:ab:71:13:db:96:6d:ae:4f:b8:58:09:26:2a:
45:9b:b3:3a:4d:2e:c4:a3:fc:ab:80:4d:68:98:5d:d6:12:a2:
6d:e3:77:21:8a:4c:cf:16:7e:62:98:a3:f2:0c:21:08:8e:eb:
6d:84:c6:9a:fe:f3:c7:c1:bb:68:1f:4a:4b:de:89:cb:01:f7:
c5:a5:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client