Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
File: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft (raw, json)
Hash identifier: ylfi9vkF6Dfb859wcx5C+xbAuCWR8SVwiWLmoWVG7PU=
Subject key identifier: D5:81:C3:13:B3:0C:BE:1A:67:03:84:CD:6D:6D:F0:14:D0:3F:07:06
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 0194BC04C59390E168A176B08386436591E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl (hash: GeQ0gmPLzfOn2xwmI/kdFWZlJ8FkwfyyhyzBrUMpndw=)
2: VlUkqVXq4pD8DdrYNzGnohL2rdE.roa (hash: RuqQ0nh3v1UQiJ2f6wvRYsbJ1jvcXoe87w6A65XCHcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c5:93:90:e1:68:a1:76:b0:83:86:43:65:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=d581c313b30cbe1a670384cd6d6df014d03f0706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:23:a0:6b:30:a1:b3:be:cf:89:09:00:55:
7e:30:6b:dc:f2:0a:51:de:eb:d9:02:20:1e:71:65:
7c:71:71:27:8f:cc:e0:75:b2:5e:fe:02:23:99:4e:
72:18:8f:8c:ac:05:a6:4f:0c:f8:6f:36:4c:23:84:
e1:f9:14:eb:bf:8a:6c:17:3b:4d:90:d2:1b:b5:9a:
d7:7c:6f:bd:5a:b7:0a:85:1c:54:5a:83:ac:e4:a5:
87:16:92:db:5b:7e:86:c9:d7:55:8e:65:d0:c4:49:
49:df:1b:ae:d5:3b:5d:8c:4d:6f:3c:da:ce:9d:eb:
16:9f:f9:8e:73:e5:57:89:e9:ef:5b:69:e5:8e:53:
a0:04:c5:d0:c4:8b:9f:9c:b2:70:30:d0:4e:37:77:
a5:14:08:3f:f8:71:85:f5:82:c6:72:51:c9:61:7b:
51:d4:13:8f:b0:4a:7c:b0:e0:d7:b6:81:a2:91:09:
04:e6:5f:c4:86:83:43:0c:4f:6b:9a:16:01:1d:5b:
ed:0d:81:ac:d8:d1:58:5d:4d:ae:3f:df:79:b2:ba:
fc:7e:fb:3d:3d:03:5d:94:11:fe:5f:8f:4e:22:e0:
3c:cd:34:c4:91:51:43:c9:14:6c:f5:2e:8c:d1:14:
a3:53:bd:d7:7d:91:bd:5a:dd:75:1f:d3:2d:f8:25:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:C3:13:B3:0C:BE:1A:67:03:84:CD:6D:6D:F0:14:D0:3F:07:06
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fe:07:03:24:ba:5a:85:3d:1a:f8:7e:7c:3c:0f:82:9a:dc:
bc:82:50:92:1c:cd:ea:95:b2:91:a2:fd:db:78:88:ff:b6:ec:
cb:ef:72:30:ac:67:01:ad:61:29:79:0b:0a:90:91:41:40:33:
69:3a:46:02:26:62:7d:32:20:76:81:75:3b:dc:24:be:a0:06:
9e:83:83:8e:bf:a8:5c:0e:89:9e:c6:cb:ca:d9:04:35:af:a8:
5b:0f:c2:a2:b5:6a:95:ef:82:55:63:7b:da:a6:80:49:ef:ab:
d4:f1:09:fc:bc:fc:bb:7b:6e:d8:7a:f4:d6:6f:6c:0b:0c:4d:
20:e2:21:ab:d2:68:7c:9e:2f:8d:ac:24:4e:dc:15:1f:5c:4b:
67:fd:33:6b:e8:2f:0a:5a:04:35:23:c5:4a:fe:47:3e:e7:fa:
d7:98:6d:63:37:ca:32:23:96:45:d5:be:46:34:39:3d:6f:6f:
3c:3d:f5:ca:02:75:92:07:b2:5e:15:bf:af:90:a7:0f:f9:22:
de:24:0e:82:3a:ae:91:b3:11:4d:3e:9e:d1:ec:e8:63:84:aa:
75:0a:58:b3:09:5b:36:b9:de:fc:91:8f:73:e0:c7:ee:14:e7:
41:89:f6:99:47:0f:e2:7c:b7:7b:80:7f:b5:79:9d:50:d5:fc:
2a:36:db:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:48:29 2025 by rpki-client