Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
File: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft (raw, json)
Hash identifier: Nw5qgyiSWgReY/N0hMYVx+89emILGbHp7mRPAyk9LyM=
Subject key identifier: 50:BD:91:29:AE:81:1B:58:64:BE:06:F6:5B:19:F3:42:67:23:B0:69
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 01953D6870808E0B312A1E38991475262A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
Manifest number: 1343
Signing time: Tue 25 Feb 2025 14:00:09 +0000
Manifest this update: Tue 25 Feb 2025 14:00:09 +0000
Manifest next update: Wed 26 Feb 2025 14:00:09 +0000
Files and hashes: 1: QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl (hash: 0bas+KaH+LQ+2s9GK1a8QV9VjXbhfiXpcTEko2BH1pg=)
2: VlUkqVXq4pD8DdrYNzGnohL2rdE.roa (hash: RuqQ0nh3v1UQiJ2f6wvRYsbJ1jvcXoe87w6A65XCHcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:68:70:80:8e:0b:31:2a:1e:38:99:14:75:26:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Feb 25 14:00:09 2025 GMT
Not After : Feb 26 14:00:09 2025 GMT
Subject: CN=50bd9129ae811b5864be06f65b19f3426723b069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:3b:c5:4c:a1:18:6a:4c:0d:6b:b8:8e:cb:
f2:5e:80:9a:b0:52:55:d3:4f:31:97:7f:fe:96:c9:
f9:46:da:4f:8b:44:6a:2d:5e:91:4c:fe:89:2b:a4:
7e:0a:78:12:a1:e2:55:5d:1f:a6:f4:88:a0:75:ea:
d3:79:ac:d5:88:94:03:5b:e9:1c:ad:c3:49:e3:41:
1a:75:6b:b9:d3:09:45:e9:d0:b1:9e:e3:80:80:ce:
76:e6:2c:23:27:cc:f4:83:08:98:8f:b6:d3:0c:eb:
ce:50:21:fe:cd:b4:99:40:ea:05:77:b4:08:9f:5b:
c1:7a:0b:1f:7d:a2:13:4b:4f:47:08:e4:4f:09:9d:
1c:6e:40:d6:5d:ff:5e:4d:75:64:49:e2:f9:ae:38:
2d:de:da:a5:a0:c3:72:79:2d:f5:01:27:09:c0:2a:
e8:bb:6b:14:03:cc:44:b7:df:d1:ba:67:ec:60:b5:
05:c2:a0:01:67:7e:9d:ac:b1:f7:50:6b:5a:2e:79:
4a:e4:4a:32:2e:0c:25:ca:2d:13:fc:c9:fa:fb:12:
6d:28:da:8e:69:3c:7a:68:e4:d8:d6:7a:83:6a:63:
99:12:43:de:03:a4:cd:61:3d:57:3a:75:aa:a5:1c:
49:46:ae:70:5e:c8:c6:e5:2b:2c:cf:8f:c2:cf:03:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:91:29:AE:81:1B:58:64:BE:06:F6:5B:19:F3:42:67:23:B0:69
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:21:51:2e:66:24:2b:db:19:a9:16:4d:cd:22:4d:39:97:ee:
0f:94:5d:83:8c:68:66:22:73:d2:f9:7e:06:b9:6c:96:b1:6e:
17:c6:15:1a:90:27:af:5b:24:e1:e1:da:a4:64:66:8f:db:53:
96:23:8f:8a:97:6b:8b:1e:e4:0b:f8:c9:75:94:9f:5a:b1:57:
89:d2:67:a3:0b:62:eb:ea:08:0e:7a:7b:70:11:c9:98:68:65:
cc:d1:0a:5f:f6:3b:f6:43:5b:6e:74:e9:a1:41:b3:71:1d:88:
c5:76:31:02:d1:48:41:e9:c1:0a:8f:07:8c:da:03:e2:a9:79:
d2:51:f1:37:fa:76:d0:e9:5f:0d:43:76:f4:71:6d:ce:5b:98:
c5:f9:19:8b:50:4d:f7:7e:9c:76:75:49:51:c2:ce:4b:9e:1b:
b2:73:15:32:ae:c1:38:f1:29:a9:0c:84:68:b4:01:50:ac:94:
32:27:ce:8b:9d:bf:48:77:a6:84:9a:72:d3:c5:da:50:71:24:
4e:cf:8a:f8:d3:3c:c2:dd:7b:91:31:c8:b0:6e:98:ca:f5:b2:
77:92:63:94:87:77:4b:e1:91:3b:58:c0:68:aa:37:1a:b4:f2:
cd:5c:8c:9a:3c:a6:1c:bd:8c:4f:c8:05:29:25:e2:d9:ed:50:
51:10:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:45:25 2025 by rpki-client