Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
File: QCD01MdSjYqCfsckkY_i31NL2QU.mft (raw, json)
Hash identifier: p62OKP5ov71j4ag59HtbYo5ImoSKzjbVmwQ2dFWwPn0=
Subject key identifier: FE:2C:10:36:6C:95:D0:20:79:9C:69:12:D9:4E:7B:E0:E4:4E:77:C1
Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Certificate serial: 0195E1225AD4F2D67132F9124C0FEE20DEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
Manifest number: 03C7
Signing time: Sat 29 Mar 2025 09:01:19 +0000
Manifest this update: Sat 29 Mar 2025 09:01:19 +0000
Manifest next update: Sun 30 Mar 2025 09:01:19 +0000
Files and hashes: 1: QCD01MdSjYqCfsckkY_i31NL2QU.crl (hash: e/Q3eokP1kVixk0Q6zP1MsuomEvv0IxHELAURaqaSbY=)
2: Zx4sEHNKCl_Lh5FzOtQjZYd3ZCE.roa (hash: 2Xu5Qu43xBBRy4X2ZZ8tBlY4rjWAu0V1llrLDaiQerk=)
3: oaLZxtKD66NwRygInPYpaycKqOc.roa (hash: Ja3SjwoX4eh5IRVh7jPL7K8MqCmfJQ9Q/LWhTt+xawU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:5a:d4:f2:d6:71:32:f9:12:4c:0f:ee:20:de:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905
Validity
Not Before: Mar 29 09:01:19 2025 GMT
Not After : Mar 30 09:01:19 2025 GMT
Subject: CN=fe2c10366c95d020799c6912d94e7be0e44e77c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:e5:81:38:f0:fd:a1:e0:ca:ec:38:76:15:
18:c6:26:01:49:cd:01:3e:60:67:e7:3d:3f:e9:62:
b0:a6:e6:50:86:fc:64:f1:0c:c9:22:c1:80:0d:26:
bc:ce:17:6f:1a:69:e4:7c:a4:a2:62:a5:18:f7:9a:
f9:14:ea:a0:3e:6c:20:8d:0c:46:1e:ab:0a:20:29:
99:fb:4c:f4:74:7c:ac:dc:f9:05:30:ec:30:30:86:
3b:31:07:98:c4:f4:37:5a:e9:15:a5:6b:f0:72:8c:
85:02:85:a1:41:d0:1b:e4:ed:52:42:a2:b7:49:e5:
3e:85:a5:79:ec:6c:2e:7e:87:3a:79:99:9c:0c:0d:
7a:f7:95:fc:e7:70:3d:99:0b:43:88:19:6a:b4:7a:
03:4e:81:ab:91:8a:89:37:6d:7d:23:dd:e9:23:22:
ae:47:eb:30:eb:06:ca:eb:be:69:d9:16:ad:f8:2c:
b0:9d:8f:e4:39:c2:27:bc:56:e3:33:0b:57:93:17:
fe:36:45:36:d8:e2:41:80:e0:63:cb:f8:de:39:9e:
a8:98:c3:42:a3:b2:09:22:9c:d4:5c:eb:b3:1a:d7:
aa:1c:42:de:23:c1:f5:16:81:b5:89:af:b1:d4:7e:
d3:28:c7:0e:5c:b6:d8:79:f9:d7:de:9f:f2:49:aa:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:10:36:6C:95:D0:20:79:9C:69:12:D9:4E:7B:E0:E4:4E:77:C1
X509v3 Authority Key Identifier:
keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:e5:6e:2a:0d:41:30:ad:98:dc:95:b5:c9:07:57:4f:fd:
cd:16:5a:3e:cf:cd:36:1d:4e:f3:97:ad:a7:fb:c9:91:89:77:
f5:7e:94:45:4f:5b:de:e2:60:44:77:87:e3:e0:1e:6a:8f:3b:
46:48:7c:0f:d1:8d:f3:46:d2:d2:85:6e:d0:95:1e:cf:46:3b:
65:67:4a:04:25:83:02:23:80:14:4c:15:0f:3f:9d:78:ac:74:
d5:9a:3c:83:c1:a3:67:1a:e2:0a:53:ad:67:0c:68:40:8b:6b:
81:35:f5:45:f5:98:f8:8f:d6:87:ea:21:06:ca:59:8a:10:96:
5b:ba:72:65:94:97:07:65:89:a6:72:91:84:27:b0:b8:4c:67:
ed:52:cf:48:6c:dd:c0:22:b5:f1:58:de:31:b0:4f:bf:36:69:
49:04:14:92:c0:f1:12:a4:e0:5d:64:71:ac:bb:43:44:ea:28:
3e:bf:c0:ee:f5:64:d9:4d:8b:97:79:32:f7:e6:51:83:56:ae:
59:9e:ee:7b:e7:ff:ea:b3:18:dc:22:b6:4d:ca:fd:68:48:69:
c2:02:73:71:8a:36:3d:59:59:bd:ef:dc:86:67:27:5e:56:e4:
98:aa:9e:f2:20:23:f0:15:f6:a5:7b:e3:1a:03:c8:29:0d:46:
49:c3:4a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:45:21 2025 by rpki-client