Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 2+eN23yI16uH5abVzDwpA8CZi7fYyU+GnFCp8vnLHrs=
Subject key identifier: 0A:BB:13:1E:5A:4B:CB:D6:18:76:A5:68:EE:25:C3:48:DF:65:1B:92
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0195DFD964823236A7D861891A2056C71935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 03:02:00 +0000
Manifest this update: Sat 29 Mar 2025 03:02:00 +0000
Manifest next update: Sun 30 Mar 2025 03:02:00 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: 54oTYS539G8guh1/kDnueHvgLTukFy/l1sOqjG/9pqI=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:64:82:32:36:a7:d8:61:89:1a:20:56:c7:19:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Mar 29 03:02:00 2025 GMT
Not After : Mar 30 03:02:00 2025 GMT
Subject: CN=0abb131e5a4bcbd61876a568ee25c348df651b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:67:53:14:d7:66:4d:76:5e:89:c6:4c:12:
02:df:84:21:92:03:84:4e:d8:2d:80:2d:21:07:ad:
72:f1:d8:21:43:cf:39:d7:91:a4:fc:4a:6b:09:53:
33:98:ce:8c:c1:7b:ae:68:e0:44:86:91:0a:38:37:
ee:c1:3c:31:e4:6a:5c:bd:ca:c5:fa:37:c9:04:d7:
29:8a:8e:ae:ce:bc:52:a6:5d:8b:8a:11:c9:be:08:
f0:e4:ad:f1:1f:fd:d9:4d:b0:16:a6:f6:6b:c8:15:
3f:52:93:eb:82:cc:55:02:cf:8d:c2:22:2d:63:bc:
cf:25:8e:cc:ca:65:20:77:89:b6:aa:8e:16:2f:c1:
0c:f2:40:fb:19:88:ae:f2:a8:96:88:f5:4e:44:af:
21:c4:c6:a0:0b:a3:1a:d1:85:0e:03:c9:7b:08:a0:
45:a2:ff:2f:eb:e7:1b:32:e0:76:0b:55:a0:d6:7e:
44:ac:20:07:6e:74:eb:18:ea:12:ff:75:c4:b0:85:
10:89:e4:f7:0b:d9:d4:e3:14:a4:72:31:0a:90:56:
fc:d9:ac:3c:ce:e4:1b:8f:e7:74:e7:4d:be:92:a6:
e8:3a:02:48:3e:1d:6e:cf:ca:90:df:b6:7c:43:06:
38:52:2e:4a:ef:93:0d:f6:ec:87:0c:c8:00:45:35:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:13:1E:5A:4B:CB:D6:18:76:A5:68:EE:25:C3:48:DF:65:1B:92
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8e:d4:9a:fb:d7:b0:c7:da:8f:c8:7e:1c:20:da:d2:d9:54:
ac:4c:00:75:23:85:d2:f7:47:6e:c5:d6:a6:4b:b8:c8:32:15:
32:03:0b:fd:1b:6d:01:6c:7b:ce:1f:5c:3f:f0:80:ae:43:35:
c7:11:29:2f:50:2a:c7:36:a4:b9:45:49:34:4d:63:1a:47:48:
a4:96:b8:df:30:ef:f4:a2:ba:16:3e:ba:58:e5:91:c9:be:97:
80:89:4e:de:1e:13:52:b3:50:d4:de:a9:ea:ca:8d:64:70:67:
5c:52:97:cb:db:10:d2:f7:55:af:b9:d5:b0:8d:da:2d:5b:29:
92:d1:ac:11:de:05:70:71:db:fc:45:48:0d:c4:de:c0:3e:ec:
ae:77:87:5b:3c:e4:e3:93:a4:fd:cb:1a:ac:f7:fc:40:0b:17:
10:ed:8f:9f:10:10:4f:ce:2b:97:ef:05:70:3b:19:b1:d1:24:
01:b5:50:f3:a8:52:d3:61:93:53:01:6b:bf:a5:e2:e6:e3:6f:
b3:ad:fe:1a:61:e7:f9:b6:8b:0e:17:3f:3c:75:23:90:7d:9c:
3b:31:81:8f:68:b4:66:d9:26:c7:4b:5f:11:2b:38:11:9a:38:
78:07:e8:81:55:5e:f5:e2:fe:05:15:e2:98:e6:7a:cb:b3:3b:
ea:ce:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:13 2025 by rpki-client