Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: 7Gy6RPEseBcGYeroNV6YFrLMCdEE5tVWtUMmxCgD3ug=
Subject key identifier: 62:DC:92:82:7B:56:00:84:65:B4:3C:6A:62:C1:B5:FE:FF:CB:9C:0E
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 0194BC3C6FAC5A9A8AE3416EE2C34F4D9891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 11B3
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: L76F237ARibuyrtcQZo4nxss2+ZJJLESjlFA62/GmQc=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:ac:5a:9a:8a:e3:41:6e:e2:c3:4f:4d:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=62dc92827b56008465b43c6a62c1b5feffcb9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:a1:b4:fc:c9:a9:1e:55:f8:f0:de:29:7b:
ea:76:f2:fc:3d:d3:c6:57:98:86:07:7e:dc:6c:bb:
26:80:29:d2:b5:91:c2:c5:8a:50:7d:08:d9:55:e5:
be:35:89:75:dc:31:2d:e0:24:0e:2d:28:96:66:5e:
63:8f:7e:71:5e:47:ec:0e:6f:d6:b2:75:53:c1:95:
9f:2b:76:a2:34:bd:80:7b:a1:b3:c3:1e:d9:d0:36:
b9:b9:2c:5d:a6:56:45:db:cf:47:21:d8:a8:f9:d2:
e3:16:ea:9f:b5:76:b0:04:af:bb:88:05:b2:2c:25:
c0:22:c2:61:08:61:53:11:d1:40:2c:6a:0b:75:98:
8a:bf:8b:ba:a7:b5:71:22:72:57:00:f1:7f:81:ae:
93:d6:d7:a8:1f:04:34:77:53:42:4e:84:f8:c1:ec:
02:52:4f:88:b7:38:fb:f2:47:57:5b:0b:9b:d3:cf:
9b:ee:4f:4e:82:d0:4b:d8:94:82:b2:ff:1e:e0:8c:
9a:c6:db:2b:c0:db:e7:f2:c9:3b:26:83:5b:1d:df:
e8:a4:ca:92:4f:53:7a:f3:84:c4:8e:30:c3:41:0b:
f2:c0:07:c1:fa:da:1c:27:be:f9:57:81:d1:02:f5:
d4:2c:1f:c5:05:ae:9f:d5:9c:28:d8:8a:00:2a:57:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:92:82:7B:56:00:84:65:B4:3C:6A:62:C1:B5:FE:FF:CB:9C:0E
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:56:c8:1a:77:53:54:da:f8:77:eb:c8:15:91:03:32:73:0e:
5e:46:a6:5b:1a:97:a5:22:01:8d:c5:47:c7:88:ff:0f:9d:4c:
b8:96:b7:86:10:aa:87:f1:b5:53:21:21:5d:1e:ec:97:eb:1f:
de:4e:68:22:a8:ec:fd:28:e8:9f:6c:dc:8e:3f:c4:c5:f3:a5:
14:f0:cb:9a:8c:7d:2a:f8:dc:b0:8f:3c:8e:19:57:8b:2e:d9:
f5:38:c4:be:1d:c6:68:78:af:3f:5d:f8:eb:93:37:a6:78:72:
ac:14:17:e7:43:69:b3:55:07:58:cb:1f:f5:d7:36:4e:e4:b5:
2d:de:7c:a0:46:2f:a7:14:6b:b7:ad:fe:17:31:7f:4a:54:23:
3a:67:83:bb:ee:9e:04:61:af:74:34:0f:8d:f5:2a:c9:f5:f3:
ed:cc:72:7d:84:c4:c7:07:7c:b0:45:80:d2:b1:8b:34:ef:eb:
ec:dd:af:08:83:f9:07:b6:e3:72:02:01:39:5b:cf:6f:d0:3e:
5f:19:a6:99:c6:ea:25:e2:3e:ef:b4:3c:5e:0d:7b:65:f5:68:
81:c4:5d:3d:c2:67:40:e4:6c:27:41:43:a4:06:6c:3d:cf:51:
3d:3c:79:84:6a:79:d3:48:c3:cf:ed:78:0f:12:42:9d:61:31:
bf:10:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:36 2025 by rpki-client