Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: ksI+q56V9CBJZOyaKF+HzSfk5geeBTO/KHkRlVSEblQ=
Subject key identifier: AD:8D:E9:74:08:DB:53:92:03:AE:AB:10:06:3D:C1:AD:90:54:E2:7B
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0195E1903C021D5EE2CBAF2F54DE8591ABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 11:01:20 +0000
Manifest this update: Sat 29 Mar 2025 11:01:20 +0000
Manifest next update: Sun 30 Mar 2025 11:01:20 +0000
Files and hashes: 1: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: t10WeVEhryL4eYEnqTarQnqStlPh2pGUov/utL3UDmg=)
2: htodApNLGhLpFMruOMlntyiGeOc.roa (hash: cFfgGJzFfvTMD4F+KAnyyiaMBsfRll7IR2YZJcMoxkc=)
3: wzndaPRsTi0mxWGQ8DwrTSyFIjc.roa (hash: kbPsqoJze+tNEJsbFqXpAiz/ui3VxFgmLT6No+U36XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:3c:02:1d:5e:e2:cb:af:2f:54:de:85:91:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Mar 29 11:01:20 2025 GMT
Not After : Mar 30 11:01:20 2025 GMT
Subject: CN=ad8de97408db539203aeab10063dc1ad9054e27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:a7:33:8b:e4:87:ac:f2:f0:81:c6:cd:78:
c4:bf:0b:6a:b2:46:5d:f9:08:8a:58:1a:c1:52:c3:
05:4b:0e:0e:de:04:42:68:78:98:00:f4:2a:c7:3e:
53:45:33:de:9b:98:9f:3f:44:64:65:f6:f4:63:53:
b8:9d:59:3b:9b:14:7e:16:9e:5a:2a:ef:17:df:50:
ff:69:e0:7a:b3:31:44:e5:dd:25:94:bd:ec:0a:a5:
f9:e5:66:35:06:ee:bb:90:93:75:f3:2b:6f:52:6a:
c6:3a:cd:39:d9:b9:45:99:56:c7:89:99:ae:59:74:
58:44:0c:66:98:80:bd:1e:59:31:35:24:75:7e:71:
f3:e4:9c:f6:4d:05:80:f0:b4:f6:7a:0e:ba:2e:8c:
42:28:84:9f:b7:1d:d9:1b:69:a5:98:2d:19:24:a4:
ad:c5:97:85:3b:f2:29:dd:fb:57:49:63:4f:b2:09:
4c:26:50:0e:c2:9a:6c:85:77:dc:74:cb:44:9f:e7:
7b:14:d3:6d:a9:a5:b3:f5:20:ce:43:e7:7e:64:c3:
0b:1e:58:05:bf:27:84:94:12:df:91:b4:74:ce:85:
d8:21:e5:93:0f:bb:d9:6e:27:8b:0e:30:8a:b6:f8:
61:5c:04:df:46:ae:de:1b:2d:ad:98:54:dd:42:b2:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:E9:74:08:DB:53:92:03:AE:AB:10:06:3D:C1:AD:90:54:E2:7B
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:4b:54:36:5c:25:ef:52:d5:17:75:a8:10:37:4e:9b:d7:
10:87:29:47:a3:a6:7b:c3:d4:c1:56:3a:2a:60:91:54:71:23:
9b:24:20:a0:b2:27:08:ca:11:09:94:de:17:0c:a5:91:38:9f:
3d:c7:63:53:75:a6:fd:93:ab:f4:de:24:52:1b:a6:cf:db:6c:
df:ea:1b:80:91:52:20:a6:91:c2:df:d6:77:00:3f:54:0b:d6:
50:58:21:01:7e:84:67:d6:0f:90:86:32:8e:92:62:36:bf:75:
bc:e0:30:08:29:c5:26:41:99:8f:23:c0:55:cd:65:7e:08:5a:
c7:41:40:34:ea:e2:1d:6b:10:e8:a5:f6:35:4e:4d:4b:01:1b:
0f:2b:21:11:44:67:6f:91:ac:66:5d:f5:38:7e:57:5e:3e:46:
5a:60:91:dd:d0:92:8b:22:c8:7d:62:8e:a2:cd:df:56:dc:8b:
15:e0:94:0a:43:c7:c7:0a:fa:1b:ad:4d:dd:65:d0:da:40:15:
c0:a1:37:26:94:81:e1:86:79:e1:02:7d:38:aa:ea:e3:8f:3b:
f9:2a:c7:6d:3d:46:8c:ab:d4:1e:91:0e:e4:cf:4f:cf:51:66:
03:27:67:ee:5f:6f:cf:f6:ba:4a:fa:c0:af:c1:2c:cd:35:d5:
2c:54:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:11 2025 by rpki-client