Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: x+SaLf52ZLP8KxKSa/HROJw33k5go92aMofAIMw8mBQ=
Subject key identifier: EC:3D:38:E0:30:6A:56:E2:77:58:35:ED:07:FA:C0:FF:5B:54:29:E4
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 0195E0EB227ABE038C31F39D5F3341C9A511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1407
Signing time: Sat 29 Mar 2025 08:01:00 +0000
Manifest this update: Sat 29 Mar 2025 08:01:00 +0000
Manifest next update: Sun 30 Mar 2025 08:01:00 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: BaAP7v3V3Gcqk2ZWg0sYqFu3MpOT47rJKHuACGp+sUw=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:22:7a:be:03:8c:31:f3:9d:5f:33:41:c9:a5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Mar 29 08:01:00 2025 GMT
Not After : Mar 30 08:01:00 2025 GMT
Subject: CN=ec3d38e0306a56e2775835ed07fac0ff5b5429e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:39:68:86:bb:aa:00:0f:44:97:0c:64:01:
57:86:18:85:ab:00:0f:6a:3c:c1:3f:7f:b6:04:73:
4e:0a:0b:aa:e2:dc:7b:90:64:cd:f1:66:ef:b0:26:
30:2e:1f:15:5a:87:e4:89:f7:ae:e7:5e:d1:73:54:
a2:12:33:0d:7a:4a:cd:95:78:16:df:c9:95:ab:37:
8b:63:bc:e9:b2:81:aa:e8:69:f4:0a:53:e4:99:34:
90:fd:57:8d:6b:56:be:92:5c:c3:d2:cb:0d:57:56:
42:2e:eb:d2:8e:dd:c7:2b:56:c7:30:20:aa:e9:8a:
45:a0:46:aa:d8:3c:1a:42:d3:82:25:71:e4:21:5a:
ee:13:ab:0f:f0:2d:56:41:e9:2c:bd:cd:05:82:fd:
5a:c7:21:c7:bd:99:bc:83:03:c8:b8:34:b6:95:ae:
f8:39:e9:d3:4b:49:7a:70:cc:88:fb:0b:e5:78:5c:
09:60:9e:49:20:42:06:d8:22:dd:c3:01:7f:10:1e:
e6:9f:78:32:44:df:1f:e1:2a:81:0f:f5:f6:c8:7a:
57:50:49:26:8a:ce:f5:3f:88:c7:ae:d6:f7:57:6b:
11:fa:b5:40:58:fb:d7:89:b2:07:66:7b:41:34:7a:
e4:7a:35:d4:e6:a6:b9:38:b1:d5:3d:c0:df:6c:cf:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:38:E0:30:6A:56:E2:77:58:35:ED:07:FA:C0:FF:5B:54:29:E4
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fb:70:e2:f1:40:60:9f:67:f7:50:7c:85:78:c2:3f:d7:70:
ad:df:1c:20:83:cf:a2:a9:82:b5:3f:a0:d8:2a:78:18:10:fd:
e3:ed:3a:84:2c:61:08:ae:2e:8a:1c:94:b9:d5:52:b5:66:5c:
f3:d5:ef:f1:f1:a2:6c:68:c3:39:f4:23:c4:c1:6c:41:49:36:
bb:ff:58:b0:c2:1d:64:a5:70:4a:4c:57:99:d5:79:3c:58:c1:
86:0c:cc:71:e1:c0:a4:80:ba:82:4b:8d:05:d1:b3:1f:36:6d:
99:10:cc:02:80:27:fe:ea:12:62:96:fc:28:cc:97:fd:f5:c2:
ae:65:60:87:d1:12:5b:f8:fc:b5:ce:30:72:94:cd:e4:da:65:
7f:2b:82:0b:ef:da:49:f1:7a:6f:e5:ca:a7:e9:81:47:3d:6a:
16:b0:27:28:c3:59:53:f8:d7:0a:cf:6d:4e:14:f9:69:39:62:
7a:d2:5d:95:ab:56:f5:6d:39:4b:f8:b1:c8:e3:c9:5d:24:39:
13:40:f9:db:ad:cc:41:83:c0:04:62:61:9f:1e:d0:47:2a:eb:
49:64:fe:6d:d6:ff:3a:72:cb:b3:fb:a2:49:44:e9:af:b1:0e:
6c:12:77:6b:66:a9:34:41:09:26:13:96:51:ec:55:a1:c4:b4:
25:89:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:31 2025 by rpki-client