Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: zmP8l1REXrpbKG2ikIGuBQvwtKVQ12aFWtvQWj0fdds=
Subject key identifier: B6:36:17:04:AE:3D:8F:C8:EB:E9:ED:35:4C:B2:78:C0:AE:1A:D6:D0
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 0194BD4E7CECEDCA3229C31B40ADA713809D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: Y/2RFzguegMRh2iuTmAfJ58NKNLBfoos1DeKy3oOu8c=)
4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:ec:ed:ca:32:29:c3:1b:40:ad:a7:13:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=b6361704ae3d8fc8ebe9ed354cb278c0ae1ad6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:ff:39:ab:d4:17:f6:5d:b7:da:22:13:4b:
58:b3:88:ce:5f:e7:6e:90:d1:f8:75:0d:67:64:dd:
17:13:43:c4:33:d8:53:3f:6e:5b:ac:10:88:0e:03:
46:b5:95:66:e1:f1:9c:88:35:cd:c8:85:7e:40:d5:
f6:bc:21:b0:f9:a6:95:a5:5e:3f:05:0b:87:d7:2e:
ff:2c:76:e0:9a:73:e6:05:6a:5b:8b:62:59:ea:96:
c3:ca:0b:4c:d1:c2:f8:f4:8e:54:10:3c:f5:aa:62:
06:96:04:5f:fd:74:78:e4:3e:5b:fc:dc:5a:fe:57:
00:9c:c6:00:0a:8b:d4:54:bd:f7:e9:68:87:04:d3:
49:1b:64:ce:b0:68:5f:e4:43:24:d4:e9:7e:c6:2a:
a2:e8:d7:fa:55:b4:cd:cd:8d:a1:c5:56:8b:3f:a3:
5b:d8:7d:e4:c0:2d:af:2c:a8:f0:f1:b7:bf:81:7f:
f4:a8:a6:ca:54:d0:65:b9:37:6c:75:97:ca:fc:ba:
8c:9b:3a:7f:72:cb:fb:3a:f8:9c:67:39:67:c0:e2:
9e:0b:6a:b0:07:c3:4a:63:0e:ef:76:af:59:ba:97:
80:44:e5:a3:96:f7:7c:72:37:b5:7f:99:37:47:59:
c8:76:50:44:2e:8b:4b:b5:74:c0:95:e1:44:5a:1e:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:17:04:AE:3D:8F:C8:EB:E9:ED:35:4C:B2:78:C0:AE:1A:D6:D0
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:3b:e0:b5:46:4c:01:3d:91:c0:f6:72:86:a5:80:79:a8:
95:2e:e6:f8:55:17:bc:3d:85:cc:35:06:9a:4a:17:f2:29:7e:
b0:5b:b4:c5:a4:7e:30:1a:c0:bf:00:79:4b:fb:de:09:75:ed:
62:19:c3:eb:49:60:a9:e2:76:2e:2f:0c:51:f5:e0:67:80:d4:
bd:ca:2d:cf:b6:b3:a4:f4:5b:7d:18:c9:79:49:41:96:f3:83:
06:9c:7a:f4:01:5a:97:39:53:ac:72:a3:57:1d:3e:47:53:4b:
3c:a4:07:d1:e7:9d:f3:cf:05:a0:16:b2:31:56:08:91:99:3b:
dc:fb:f4:a9:65:f0:f5:6e:95:55:1f:39:04:6f:24:2f:df:eb:
b4:99:15:74:23:2e:5b:8f:91:dc:b5:5b:11:a9:7f:7c:75:8f:
01:f0:da:7f:f3:cd:8f:40:47:35:62:2f:ba:91:15:96:0a:3c:
75:27:8b:71:59:89:3b:1e:e1:47:40:96:0b:71:e0:62:29:7d:
8a:bf:8c:2c:67:10:4a:f4:e3:94:54:67:88:f6:c0:98:0b:fd:
e2:b3:39:84:f0:a8:ad:63:4d:57:c1:8d:55:e9:45:65:07:1d:
ee:6b:3b:fb:0d:dd:a5:1f:cd:45:d3:8f:f2:76:ed:42:fd:e0:
eb:81:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:25 2025 by rpki-client