Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: ywoUgb+DmKfQXKCElw9o0Aq9LUqps/zMRG307Qb6eYk=
Subject key identifier: E9:8B:59:2B:C6:95:C5:26:60:BB:3F:FE:69:AA:27:DC:A2:27:FA:97
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 0194BD4E966832CA292DE463A02304082AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0C87
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: qyb6azJWl6iwWM/8CPM4X77MxR7e2XdjOLmVXgL+AFs=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:96:68:32:ca:29:2d:e4:63:a0:23:04:08:2a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=e98b592bc695c52660bb3ffe69aa27dca227fa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:6e:9e:c2:c9:5f:29:07:fe:af:c0:42:0d:
a5:33:2d:3b:47:92:0a:44:b0:99:f9:84:ed:34:a4:
1c:18:c7:99:ba:11:a2:68:a0:1b:9c:17:d6:4f:53:
5a:ed:0a:2c:b8:22:3a:32:e9:09:d6:9d:31:e0:42:
a2:dc:ea:32:2c:38:c7:95:2d:3e:ab:17:f9:6c:e3:
64:5d:fd:72:42:c2:ee:1c:5f:bf:9f:3e:76:7d:20:
9a:ac:a0:5f:c1:4c:5a:78:70:d2:85:5b:78:6b:70:
97:cc:69:d4:99:a6:77:92:d7:62:54:6d:02:da:5b:
57:91:d0:d3:bc:83:b7:66:69:55:ac:2f:23:7a:36:
d6:40:a9:1e:29:00:a5:c5:49:65:f6:00:65:b4:85:
4e:e6:56:06:33:2b:10:89:fe:d2:3e:1d:04:87:ef:
7e:80:31:2e:e4:ce:0b:86:8c:36:dc:85:c7:e2:31:
48:30:fb:21:5d:08:b4:e4:d3:1f:c3:a4:5e:f1:d5:
ea:01:76:16:06:46:3a:ff:71:b8:17:90:19:fb:48:
35:d0:ad:9d:de:cd:14:24:ae:9c:2e:eb:41:71:e2:
2f:8f:d5:39:d7:58:30:e0:24:06:6f:92:16:07:95:
1f:cb:4f:69:60:f9:9c:a8:22:98:9d:fd:15:34:df:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8B:59:2B:C6:95:C5:26:60:BB:3F:FE:69:AA:27:DC:A2:27:FA:97
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:d9:7d:d0:6e:8d:27:78:ae:ee:f0:d0:0a:42:6a:0c:30:
7f:cd:c2:29:61:35:35:0c:25:0a:e6:8a:7e:15:d3:2e:a3:1c:
ec:54:d8:be:a5:5a:dc:46:5d:65:bd:f2:1a:3a:36:36:e1:46:
87:94:3d:df:54:bb:65:f0:73:76:25:23:a5:85:c3:8b:33:13:
78:c1:d4:06:b5:7d:1b:78:40:0d:8d:c0:a1:48:42:ff:8d:e5:
29:5b:58:c2:0d:87:ae:b2:fd:d7:d9:f3:f9:f6:29:9a:b0:9e:
4b:17:0e:9a:42:62:c0:d1:6b:e1:f1:95:57:c7:94:00:6e:24:
51:9b:14:c1:6e:15:15:50:5c:6b:74:70:a4:e8:da:60:9e:e0:
39:d0:ae:de:05:e7:61:f1:a9:b6:50:c0:4b:51:f7:a2:25:f1:
d8:83:36:02:68:29:5b:05:4e:f5:5b:8d:36:fa:49:0e:61:69:
54:e1:b6:d0:de:b5:b8:93:2c:86:5e:e0:9b:15:3e:5f:07:64:
21:6a:51:3c:35:14:7b:ba:27:2c:83:53:dc:87:b9:48:41:ee:
dd:05:0d:c5:b3:a8:b7:bb:f8:28:29:72:c3:a0:ac:87:4f:14:
5f:b1:d9:6f:b6:04:7b:3c:b8:3b:96:91:f3:a2:60:7d:41:f7:
71:2b:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:34 2025 by rpki-client