Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
File: QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft (raw, json)
Hash identifier: 1T8ZwijJsViN8ZSP5seq9wNOHfmHwnpv8WwrH19QZH0=
Subject key identifier: BC:38:55:72:CA:72:55:F6:A3:53:59:CB:CE:9E:EA:89:9D:FA:3B:92
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Certificate issuer: /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial: 01946EFCAB4824BBAF0166A05FCF3609A70F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
Manifest number: 4E
Signing time: Thu 16 Jan 2025 12:00:40 +0000
Manifest this update: Thu 16 Jan 2025 12:00:40 +0000
Manifest next update: Fri 17 Jan 2025 12:00:40 +0000
Files and hashes: 1: QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl (hash: ymnliFm+M3NCdNM6BEzQt5Sjc9cUiKV1rhkSF8BSa7s=)
2: ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa (hash: RDhv3a+rjqy1nFbzdPkoModvDBOI69Vl9+D8sNqVAz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:fc:ab:48:24:bb:af:01:66:a0:5f:cf:36:09:a7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Validity
Not Before: Jan 16 12:00:40 2025 GMT
Not After : Jan 17 12:00:40 2025 GMT
Subject: CN=bc385572ca7255f6a35359cbce9eea899dfa3b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:99:81:94:5c:c4:f5:66:0e:69:06:af:06:
07:fa:4b:09:4a:e1:69:a9:91:3f:de:f3:2d:e9:b0:
2a:ef:3a:f9:28:3a:d9:d7:63:75:5b:f5:93:e5:92:
01:5a:29:a6:77:ff:0c:75:82:0a:3d:15:54:8d:f6:
29:bd:8a:32:17:c6:a4:b9:b8:00:11:f1:12:8a:24:
f3:27:94:ec:83:c0:06:85:6e:fb:10:82:58:03:42:
d1:c4:cd:c8:02:c0:39:c7:80:e3:59:a8:39:18:94:
e7:42:7a:9f:b1:e0:94:07:3e:15:a6:06:a2:71:15:
37:f1:b5:79:58:f8:29:f1:37:8f:29:8f:f4:ea:66:
ce:da:21:10:0c:62:63:da:ae:21:ff:d9:80:0f:d9:
56:12:98:b1:09:09:c3:f6:66:9a:97:2f:c2:b1:70:
81:71:02:8f:a1:f0:ff:2e:d3:d1:8a:fc:3a:36:98:
d3:8b:79:24:62:61:2c:4c:1a:a7:3e:85:3e:72:4b:
ae:64:17:1f:e3:01:93:71:65:82:a1:52:81:f4:e5:
5d:96:87:c7:80:17:57:01:fa:49:90:79:16:cb:3a:
13:7a:89:2b:e1:a2:e9:a7:a6:e2:7b:81:8b:4c:c2:
2b:7e:31:9d:3a:04:4f:ce:f0:7e:5e:c3:07:5a:b6:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:55:72:CA:72:55:F6:A3:53:59:CB:CE:9E:EA:89:9D:FA:3B:92
X509v3 Authority Key Identifier:
keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:54:66:bb:e5:5d:1d:da:d4:b2:df:60:3b:5c:77:76:7a:37:
19:dd:e5:87:63:58:f4:7a:dc:d7:9d:0c:46:a6:d0:0c:63:4e:
51:a9:e5:73:2f:79:ca:9b:f3:6b:be:42:06:00:87:9b:7e:5c:
07:7c:96:03:41:bc:5d:57:2d:1d:55:5c:c8:61:59:ee:52:34:
29:85:82:64:4f:b1:d6:f7:f7:1a:13:54:0c:86:cd:ca:29:17:
f4:87:0d:dc:11:03:25:a7:9e:b0:08:6f:75:ca:f9:cc:08:24:
65:40:16:67:d9:bc:62:80:eb:fd:29:b4:ba:62:99:2d:d3:74:
92:39:7a:44:25:5a:da:d6:57:36:95:2b:e7:10:68:a0:36:c7:
3a:2d:f2:96:ba:b0:39:e0:ad:61:4e:2b:36:5c:37:48:22:6d:
37:31:db:27:cd:2f:0c:5c:09:3f:8e:21:de:04:61:e8:c2:0a:
ad:01:1e:3d:39:7e:a9:b6:57:73:aa:01:5b:60:69:31:00:32:
e0:f4:6c:e0:52:53:16:20:15:56:83:fa:7e:7f:6c:64:a4:b5:
1e:96:fa:7a:6e:7b:a3:36:7e:19:2e:94:51:74:bb:ab:0c:d7:
3a:68:f5:03:68:14:f8:30:20:99:01:52:45:5c:51:16:f1:c2:
83:90:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:33:12 2025 by rpki-client