Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: V+vpHpXEk6SoGd4dwEQPPH2BJuMrzXmfUZrJK8jz3sQ=
Subject key identifier: 92:E6:82:8B:24:7A:AC:69:1E:D2:31:B4:D9:D8:50:22:C4:E4:1F:C4
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 0194BCA9C0490F66C0BCD14D6AA7C23946F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: RK/1w++c3A9XA0rf2lGutRqOH9aAkNRPiuFk0ednNQg=)
2: _5aThoYvjMsITc0AmZUahNTEazc.roa (hash: iey0wwdJxsog8xLwNAgdWxYbkCyS7fS72sYT3LN2fPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c0:49:0f:66:c0:bc:d1:4d:6a:a7:c2:39:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=92e6828b247aac691ed231b4d9d85022c4e41fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:bf:e2:7f:90:e4:3c:80:10:bb:99:e9:1b:
91:f4:00:79:b3:bf:56:fd:92:28:02:54:68:c8:71:
0e:1b:a1:37:23:96:37:80:a9:58:7e:fe:e4:50:19:
84:80:65:e0:c4:31:b0:9b:5f:14:9b:12:99:d2:7e:
46:97:b7:07:e4:da:a7:d6:ca:78:fe:e6:3c:9c:75:
41:61:a5:4b:ab:ac:d6:d7:1e:18:79:51:b3:d8:7a:
00:c9:8c:5a:2b:81:9b:f6:3b:a2:20:e6:b0:11:04:
54:ba:0d:a5:c3:0a:71:a1:82:3f:8e:04:70:f9:e9:
d6:58:62:6e:ba:7d:a0:40:12:de:ae:c7:21:ea:2a:
44:bc:e9:02:41:57:9e:81:a4:ad:2f:31:f0:8b:f5:
24:2b:68:80:71:9f:9a:d3:df:63:82:53:99:dc:54:
8e:a7:58:b0:62:64:6a:8e:4f:bd:48:13:ff:19:2e:
52:79:b1:a3:2b:c6:2a:10:ec:44:df:f9:0f:3a:10:
d3:ab:87:f9:13:09:fe:47:0a:1d:e1:72:a4:61:9a:
17:a0:0c:b5:7f:28:b0:63:45:df:e8:51:05:23:f3:
14:fe:c1:7d:44:ef:4b:f4:2a:2e:aa:46:e8:d3:62:
fa:69:fb:eb:51:6f:22:9f:61:d8:ad:ac:64:9d:38:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:82:8B:24:7A:AC:69:1E:D2:31:B4:D9:D8:50:22:C4:E4:1F:C4
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7a:f8:d8:83:a0:1a:f9:65:d8:6b:84:f1:d7:7a:c4:ea:f9:
a1:5f:ac:ec:b9:de:75:a8:ec:1a:f2:d2:3d:f6:91:44:02:e2:
ff:d2:cf:1f:43:0c:8c:ed:f0:53:73:4d:43:c1:f6:57:c0:ff:
30:86:99:02:4e:63:3a:8f:fd:0a:fa:4c:53:08:a8:47:28:46:
5f:b0:fb:dc:7d:5d:dd:04:ed:fb:e7:18:e9:a7:eb:d8:f6:fc:
27:43:ea:27:c1:af:e2:65:c6:0a:81:1e:e9:7d:53:36:3b:8b:
d1:f0:93:3b:bf:49:67:b4:82:16:56:2c:97:0e:e8:44:87:38:
50:a5:ec:5e:6c:a1:8f:a9:0c:f3:4a:db:de:9f:63:26:79:bc:
23:46:9f:b2:93:72:c4:82:10:58:39:f1:7f:0a:79:6e:ea:2f:
94:a9:a9:1c:3d:10:a2:54:e3:81:8f:5b:69:97:66:e2:22:78:
dc:71:bd:8e:37:88:ca:96:04:9b:4f:34:6d:ec:54:1b:90:4e:
d8:26:10:97:d0:40:63:5a:cd:2e:8d:c1:85:3a:52:65:55:71:
34:ac:46:f0:7f:fe:98:dd:fe:b6:78:50:f3:e8:f5:35:7f:31:
2e:8f:1c:6c:03:9b:f1:35:df:91:0b:d1:ef:7d:e8:f5:dd:c5:
1b:67:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:49 2025 by rpki-client