Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
File: QGZc6AggpHzjuD9IAolVSlikXfQ.mft (raw, json)
Hash identifier: u7DvkLm3rUxTAZRoJpHaOZlOCqk2YDDFX0jIK3dagRw=
Subject key identifier: 8F:78:F9:B1:73:4E:FE:8B:6F:03:C3:52:BF:51:97:0B:CB:B8:B5:C1
Authority key identifier: 40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
Certificate issuer: /CN=40665ce80820a47ce3b83f480289554a58a45df4
Certificate serial: 0193F1757AF3B693F3684B7747F692A96255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
Manifest number: 086B
Signing time: Mon 23 Dec 2024 03:00:28 +0000
Manifest this update: Mon 23 Dec 2024 03:00:28 +0000
Manifest next update: Tue 24 Dec 2024 03:00:28 +0000
Files and hashes: 1: 4fy3vWdarcLkTpJwYhN0-mujCFw.roa (hash: 7wuNe9z7h5OV3utTfrlA+yDD7ovgc0KJaIDtfaZjsCo=)
2: QGZc6AggpHzjuD9IAolVSlikXfQ.crl (hash: ILcb6PBdkrDaIZ3rO9QlIS59yNgrxjzMuotegrHk8Ao=)
3: w3nqlWhDUzrIGoUXM_6aB7XZoPg.roa (hash: nR2cGzYvREGUXYAEW54OaPIpQqe6J5b5qeOulW4ga5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:75:7a:f3:b6:93:f3:68:4b:77:47:f6:92:a9:62:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40665ce80820a47ce3b83f480289554a58a45df4
Validity
Not Before: Dec 23 03:00:28 2024 GMT
Not After : Dec 24 03:00:28 2024 GMT
Subject: CN=8f78f9b1734efe8b6f03c352bf51970bcbb8b5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:1d:67:fd:95:bb:47:fc:28:c8:7c:8b:db:
9f:4e:24:97:e5:80:6d:e8:d4:3d:6c:d3:5c:14:6b:
d6:9a:4b:18:5a:2b:65:21:a2:c9:50:1b:b3:5f:83:
12:2f:64:f5:cb:fd:4e:57:17:d6:ce:48:cd:7c:c6:
cd:b4:69:74:da:e7:74:a9:50:cc:9d:2a:d7:0c:ea:
d7:b6:7c:b7:ea:99:d0:3a:84:cd:35:9f:27:9c:e4:
21:b8:fa:a6:fd:b9:12:2a:0a:4e:7b:eb:35:3e:3f:
bb:e6:3e:f8:67:93:b9:f8:9a:db:71:e2:b9:cc:0d:
e0:d6:22:27:a4:f3:ca:0a:70:f4:25:26:ec:6b:16:
bf:af:40:2b:49:93:bb:80:23:9d:6a:eb:9b:36:5b:
ea:5e:b9:d3:46:3d:87:e4:b6:17:fa:45:8f:66:e9:
26:51:25:4c:6b:b8:7d:10:47:2c:9b:d2:a3:57:fa:
5c:b8:14:0e:11:b6:6a:e7:27:95:fa:06:28:57:b2:
fa:b4:95:d5:0f:c9:7b:5d:66:0d:32:e3:a8:aa:9e:
40:78:19:6e:d1:6b:a1:78:8a:27:36:64:25:af:01:
d5:60:90:9f:a7:ad:60:4e:96:ca:ab:3d:69:b9:d5:
6a:69:7e:9b:f8:cd:6d:78:e9:ab:f1:c9:59:09:e0:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:F9:B1:73:4E:FE:8B:6F:03:C3:52:BF:51:97:0B:CB:B8:B5:C1
X509v3 Authority Key Identifier:
keyid:40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:b4:ba:7f:22:dc:0b:5c:be:17:82:9c:c5:3a:f2:1d:8c:
df:ac:d8:27:1a:2d:78:bc:2e:a9:34:1a:35:6f:ef:69:d4:72:
1c:75:8f:b9:b0:77:5f:7d:92:23:9d:ff:0b:90:5f:ef:e8:29:
bb:69:8a:6a:d3:4d:2b:7c:ec:a3:10:6d:01:be:bf:9e:5a:7e:
97:51:5e:c8:fa:d3:29:c6:59:02:a3:fb:d9:ca:2c:df:08:2c:
9e:c0:d9:51:75:d6:16:6e:7d:54:1c:bf:e6:aa:a2:b5:2b:d4:
a5:20:57:4a:9c:67:01:db:0c:c4:6c:a0:16:35:0b:e9:93:ea:
d4:d6:11:3b:ee:92:42:a2:f8:48:cd:67:a5:d3:55:e2:e3:69:
6b:cd:8c:c6:3d:ba:38:60:d7:2e:5e:bd:aa:50:a2:74:ec:92:
e7:91:87:c8:8e:bf:0c:e4:9b:02:65:0d:d0:c8:4f:bc:a1:74:
68:1d:71:8b:e1:4b:ed:6f:4b:3e:f9:b8:92:b6:4a:89:d6:d4:
9c:b8:d0:51:71:79:b8:4d:ba:27:eb:7f:f8:86:75:54:2c:d1:
fe:6d:53:00:72:57:57:a1:52:ba:fe:b1:6d:d2:00:84:1a:0c:
e2:6d:cf:9a:3f:6e:96:15:2a:cf:0b:99:cb:dc:ae:62:ce:54:
6a:da:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:34 2025 by rpki-client