Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: KQV3e0w7ogdwteNFdC2H5BgdIwPfTK+MKLfsVStgfhA=
Subject key identifier: 7F:F8:04:0F:29:A4:A1:CF:F6:E3:A8:2A:81:D6:54:CE:49:C0:AA:06
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 0194BD85878F289388BBC57CB8F80B427831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 1440
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: LxK49wQNApdxyp8v_k05CLgMI5E.roa (hash: cyuNB9STnC1KALLJGwZIhbMMjarSRyXyHryPQj2j9DA=)
2: M97-hCqw2Vx1eGdNwJtfSJAKIGA.roa (hash: Y6gDlqV6TEZRb07Puz7AyZSTJ3gdQvxWlFRIW7wJ1u0=)
3: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: wlhAGJZA8uuY8BbFloWRVWED0cjPFvAHy8Wt5NLT2T0=)
4: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:8f:28:93:88:bb:c5:7c:b8:f8:0b:42:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=7ff8040f29a4a1cff6e3a82a81d654ce49c0aa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:ec:2a:43:3c:f5:2b:e3:89:a9:c7:45:2a:
46:4f:e5:c4:39:ba:b3:1c:95:90:27:89:81:fe:86:
7d:1a:17:c9:2a:b0:ee:fe:b7:8f:93:0b:a2:ff:1a:
9d:18:60:4c:81:48:1d:2d:f5:90:f5:a8:73:f6:41:
74:4f:0d:9c:4d:05:a4:77:35:85:88:b6:97:ad:e3:
e9:1d:db:83:87:cd:78:a4:38:60:c0:6c:fb:e0:86:
4a:e7:93:49:3e:05:63:f6:32:48:b2:5d:d9:90:2f:
df:fd:2c:5a:bd:86:11:8a:25:4e:44:92:94:31:6d:
60:f6:5b:d1:d4:a2:82:84:17:fe:7c:b0:c6:3b:46:
4a:15:61:21:6e:5d:ec:6d:7f:da:c5:b4:0d:24:01:
65:fa:0c:4e:9a:4c:ba:b9:d4:57:cc:4a:42:91:c9:
7d:a4:67:de:d0:7a:f8:f9:a1:8c:de:a7:1a:e1:66:
68:ec:81:3e:b8:dc:75:08:5c:1b:17:6d:ae:30:9a:
e7:66:25:9c:b9:cf:75:55:da:a2:53:9c:16:1b:07:
30:75:a0:13:73:a2:56:75:8a:0b:06:84:f0:de:64:
b8:53:a2:f0:a3:45:60:7e:f3:51:5c:e4:42:f2:89:
86:0c:51:bc:55:a7:67:53:3e:c3:c0:54:53:62:ca:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:04:0F:29:A4:A1:CF:F6:E3:A8:2A:81:D6:54:CE:49:C0:AA:06
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:fa:2b:21:56:15:3f:15:35:7d:25:d5:b5:80:22:c0:50:
a4:15:ce:57:ec:af:08:50:6d:4b:10:3d:41:f7:66:a8:15:bc:
ac:ef:35:b8:43:e0:e6:1b:77:fa:d9:e1:fc:2d:2e:1c:49:f4:
63:a3:73:83:94:09:2a:62:a7:97:18:b2:60:f0:33:e5:fc:94:
41:d6:be:3e:d4:3e:ae:b7:db:ee:fe:42:07:6d:6c:9a:c8:91:
12:ea:f3:a4:64:92:5f:d4:91:ac:e1:bc:11:19:75:dd:b2:90:
0b:5f:4b:6a:5e:6c:b6:5c:f8:4e:57:06:55:37:46:2d:c9:2e:
23:47:b9:b9:c3:5e:d9:5d:d7:b0:13:79:98:19:f1:e9:63:d8:
0f:a0:34:d4:be:fd:17:e0:28:e2:ca:ac:89:dc:78:27:e2:c5:
e5:9b:ef:9f:8f:ba:29:40:7a:c3:c6:b6:b6:fa:e5:80:7e:3f:
68:a4:32:6f:52:e3:c9:b6:42:3e:1f:24:7b:f2:10:b9:32:6c:
c8:ee:94:85:25:52:3a:30:57:47:ef:92:d7:b9:dd:20:08:37:
9f:e2:69:32:6d:15:62:68:a0:3e:d0:0f:c8:da:38:b3:97:b2:
cc:72:db:fc:b4:e0:db:38:b2:43:e3:40:05:de:ff:ad:fe:fc:
9a:b2:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:36 2025 by rpki-client