Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: 74+OGp1bKhHsBstha4V0WOVDGyMj1s4tkvhnWSaJkk8=
Subject key identifier: 94:7E:64:F3:B2:15:3C:58:B5:A4:02:53:E0:3D:B6:ED:B4:7E:8F:E5
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 0194BC04C184C3F6F9379426411E819B9B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: FI3HoSxb3NkxGB3behT3oUH5lIQ+pk0iggK0irvMFmQ=)
2: aTUWINMGKAxXyPjULlDsCzxwjNA.roa (hash: RaczMm3Wo4rB6JIQE6qKdkcTiCDtnDTo1726sQtpVeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:84:c3:f6:f9:37:94:26:41:1e:81:9b:9b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=947e64f3b2153c58b5a40253e03db6edb47e8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:ec:ee:d0:a7:f1:82:09:05:37:08:09:b0:
01:91:1e:f4:13:73:c4:17:a3:51:75:e5:d7:01:54:
5b:ff:c2:a7:7e:a1:f4:50:d1:c6:0f:e0:9b:bc:63:
65:97:19:45:7e:54:97:dd:4f:55:08:ae:c0:4a:1e:
61:aa:0e:9f:77:8f:c2:3b:14:ec:c3:6b:77:5c:b0:
38:47:cb:61:c8:9e:b2:0b:f1:7d:16:a3:07:1a:31:
10:4e:38:ea:db:52:8e:e2:40:4f:eb:51:91:48:cb:
84:54:ff:7b:9d:35:95:2e:9e:de:c4:dd:7e:dd:78:
ad:2a:cd:50:b0:2d:e3:4a:f3:60:70:24:81:39:7e:
ab:44:ab:ad:89:46:03:b7:92:d1:a4:12:37:4d:35:
6c:8d:8f:32:90:23:b3:49:94:d0:8f:43:71:5d:16:
30:65:8a:92:09:29:92:39:a9:90:02:1a:2b:ab:28:
d4:36:f8:2c:0a:72:56:22:d5:8b:41:e9:eb:7a:a6:
e3:27:d4:07:84:e0:93:b0:6f:81:d9:5e:56:89:c0:
22:57:93:ff:6e:db:96:e9:c8:2c:0a:71:6a:47:99:
a3:16:4f:73:f0:de:c9:08:fb:a7:38:61:2c:aa:04:
00:09:33:e5:bc:79:e4:a5:0c:62:71:45:6d:00:ce:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:64:F3:B2:15:3C:58:B5:A4:02:53:E0:3D:B6:ED:B4:7E:8F:E5
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:52:5b:a5:50:b1:d2:4e:3f:1a:32:20:ca:c0:65:cc:7f:80:
58:d4:a4:b4:12:8d:2c:ab:6c:78:25:5e:09:6e:72:49:73:fe:
fa:e9:6f:7e:6f:39:76:1d:e2:2c:36:54:c3:eb:03:41:f8:45:
1d:c5:9f:00:ec:f6:dc:a9:52:c4:f6:71:03:8e:50:05:8e:bc:
1a:c1:d0:40:54:a1:26:2f:55:e6:e4:6d:e6:c7:ba:c9:e2:7a:
e1:fc:db:c1:97:15:40:de:fd:be:19:e7:de:02:2c:32:bd:ea:
67:0e:13:2b:65:a8:83:22:90:58:03:e4:0f:dc:a6:af:b2:af:
6e:a1:f2:e6:8d:8c:19:91:70:eb:c0:33:84:2e:a2:f2:5f:53:
df:d2:db:eb:2b:ed:69:7a:6c:93:5d:5e:1e:db:cd:3e:84:a7:
46:72:cf:99:2c:5d:0b:3b:b5:f6:74:ee:af:04:21:cc:79:6e:
6a:9d:28:27:2b:72:60:4a:1c:2d:f3:50:c9:2b:1d:c3:ff:75:
17:57:d2:91:d6:ff:ff:20:d1:18:68:42:51:f4:0a:15:b5:2c:
88:98:34:65:cd:95:de:23:dc:70:f0:e8:57:70:c5:0b:ab:5b:
41:98:1b:84:89:15:f9:76:c9:92:da:21:10:67:79:57:21:bc:
22:f1:e3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:16:07 2025 by rpki-client