Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json)
Hash identifier: KxSKjmz9e924o3XXIkJ2lH/7Pf2qHyX0Rdix/B5ydv4=
Subject key identifier: 3C:CA:62:E9:8B:1C:6C:09:B4:D0:22:85:C3:7D:33:83:B7:5D:EA:DA
Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Certificate serial: 0194BC04C29C22F6EE585D197F18FABB8F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
Manifest number: 1385
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: I3asWb0Ke_YTZ9x8-oMXPECbM9c.roa (hash: DFO6kXzPePgIeZm2V5GpwnQuioD5uOOrmUgP/RCLs14=)
2: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: g7xm1jobrqDABFMW3NLiUSL5YFios4v1cjXTNPE9Vzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c2:9c:22:f6:ee:58:5d:19:7f:18:fa:bb:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=3cca62e98b1c6c09b4d02285c37d3383b75deada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:fe:1f:ce:a6:c1:e7:b8:6f:5e:ee:90:ad:
6d:85:65:ea:28:01:77:28:82:51:d0:cf:fb:c4:2c:
06:96:3d:45:3c:dc:e3:84:58:0b:e1:49:64:53:4c:
cd:ce:2a:50:bc:37:33:5b:57:5b:41:de:dd:40:a0:
04:7f:70:55:f0:41:fc:93:6c:3d:ec:6c:9e:79:89:
af:89:b0:02:4b:42:40:b7:b8:69:7f:51:80:34:24:
80:07:a0:41:0e:7f:ee:79:32:bd:33:d0:73:ec:29:
62:9e:af:97:a9:09:34:17:71:7e:17:f5:c1:1d:de:
86:d2:1a:e8:b4:23:fc:37:4d:e5:e9:33:cf:83:60:
77:4e:8e:63:13:54:d3:cb:c8:e3:7c:3e:1a:2a:ac:
72:47:4c:2b:b1:66:8f:d4:0b:64:8f:49:b6:19:ba:
3b:71:48:88:77:83:b1:85:87:09:2c:d9:9b:22:24:
c5:e9:4a:ae:68:0c:b4:7c:a0:fd:6c:46:27:18:8f:
e3:71:68:62:1a:26:a0:64:6e:bf:47:7f:6b:e2:40:
c5:e3:88:ba:68:a3:01:f4:56:19:57:ec:a1:81:3d:
44:54:dc:2e:c8:ec:81:ce:60:ac:40:63:8e:91:8b:
64:4e:65:c6:04:c0:c4:44:26:79:48:94:33:29:2a:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:62:E9:8B:1C:6C:09:B4:D0:22:85:C3:7D:33:83:B7:5D:EA:DA
X509v3 Authority Key Identifier:
keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:84:d8:5e:b0:06:fc:b1:24:44:80:ad:1b:1b:40:27:ed:1c:
4a:b4:5a:79:14:1f:6d:e5:c0:b6:ce:17:ea:fd:15:5b:0f:01:
c6:f7:28:56:15:05:4c:19:dc:ca:53:b7:c3:ae:1e:13:36:b8:
56:8c:fe:a4:96:04:75:76:b2:32:b3:c4:c2:21:d8:6b:aa:ac:
aa:65:73:15:3d:a0:3c:f4:12:5c:2a:cf:37:ec:ae:e9:92:9d:
08:0d:8c:43:ce:8a:0c:0e:ff:b9:20:c3:c3:b4:1b:93:09:4c:
31:71:db:2e:29:e7:ac:9b:0f:32:a6:d3:5d:fb:1f:50:77:57:
23:38:09:ce:1e:e8:1a:a4:94:ba:bf:e6:2d:a1:99:87:a8:50:
58:bb:01:76:0b:7c:0a:11:36:b4:fb:43:84:8e:58:65:de:d1:
b2:e6:13:ec:fb:72:17:28:3b:2f:4a:60:e6:c6:12:0e:cf:e2:
ad:dc:10:f0:62:90:d3:64:96:26:56:67:94:7c:1f:e0:70:d4:
32:a4:8b:61:70:44:00:27:a6:a6:40:d2:cc:49:f6:d6:46:d1:
fb:db:53:21:44:1c:70:12:67:d9:03:34:dc:05:92:1f:91:31:
19:38:f6:83:dc:f5:40:13:75:68:15:7b:98:17:13:81:13:f7:
68:ab:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:56 2025 by rpki-client