Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: l45Db+cuZaxsPhZ6LzecC7fTXNrwuM+H040/P3tIog0=
Subject key identifier: 08:A5:46:15:7B:1A:17:A9:31:42:B0:FC:11:BA:30:43:C1:A2:03:C8
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 0194BD855E2125FBAB23D2EAC81868357C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 05DB
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: /+lMvXCgTrPeGxnib8DqB00taz6BQR1YbrEHq3oXbS8=)
2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:21:25:fb:ab:23:d2:ea:c8:18:68:35:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=08a546157b1a17a93142b0fc11ba3043c1a203c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:ee:7d:a8:81:92:7f:f2:52:04:cc:9e:4c:
a5:ab:a4:72:bc:df:3b:b0:76:fa:c4:8e:a3:4b:cb:
9c:af:b8:5a:53:90:c5:b9:43:61:be:cf:9a:74:0c:
d2:24:3e:32:c6:0f:5f:a9:b3:f3:44:a7:ba:67:8c:
94:cb:a2:d8:96:2b:94:07:a9:d4:20:b5:0a:fa:16:
2e:0d:1a:56:92:57:ae:e4:51:a5:a9:b2:60:b6:90:
7f:53:7d:b2:a3:0c:19:a3:be:74:04:9d:56:fd:97:
d3:82:83:57:42:55:bd:c0:07:bd:8d:c8:cf:44:fc:
66:cf:d7:5c:a6:30:ac:4c:20:00:04:11:70:2c:bc:
a2:27:63:62:c9:dd:fa:16:35:b8:d1:f5:d9:5c:e1:
f2:e5:14:3b:e2:10:e3:8d:d4:0f:6a:99:53:f8:3a:
9d:37:a1:48:87:20:f8:9e:b4:f3:6d:57:ef:1a:eb:
6c:f7:46:01:89:1f:43:45:97:f1:0c:ac:53:a4:74:
bd:b7:b0:ba:d9:45:a3:9f:a3:a8:8d:1f:94:a2:c5:
78:eb:9d:9d:eb:5f:44:8a:4c:e6:f4:07:6e:42:7c:
6e:38:2c:1c:47:25:35:9e:33:62:d7:89:73:10:e2:
49:da:8c:da:b8:6e:81:e2:58:5e:b8:be:45:2f:75:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:46:15:7B:1A:17:A9:31:42:B0:FC:11:BA:30:43:C1:A2:03:C8
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:cb:54:58:20:a4:27:5a:e3:5c:96:ec:fb:e4:f6:45:a5:
6f:83:eb:f2:9b:84:ac:9c:d5:31:64:72:0d:68:22:0a:5d:26:
99:e8:8a:29:f4:18:56:50:ed:f6:47:6b:dd:2a:e4:3c:eb:50:
a1:5c:31:64:81:ea:17:61:4b:0a:da:f6:ec:a0:d8:dc:7d:49:
34:27:b5:2c:15:e1:cb:cd:36:d8:69:bd:30:63:ec:62:dc:94:
12:38:bf:7f:f4:8d:78:3a:5a:6c:31:e0:73:ad:92:58:6e:19:
7f:00:0c:88:27:ea:30:d8:39:98:51:f1:99:2b:84:4f:f4:5e:
12:ab:26:a3:40:cc:07:6a:a5:32:3d:70:9a:01:93:33:1d:93:
06:63:78:06:7d:23:08:52:f5:e3:2b:cf:ca:1e:40:b9:bf:ee:
fd:d8:c2:40:af:cb:c9:3b:e7:f3:e6:58:13:54:c6:4e:22:1e:
dc:5d:d5:f1:3c:fe:f1:b0:e1:f4:9e:bb:12:9c:f5:e0:40:3d:
45:b2:9d:5c:10:f5:76:e8:c3:03:a5:28:ac:df:39:95:96:67:
a8:4d:f2:b2:07:a0:87:81:0a:9c:5b:9d:9e:9a:15:40:50:27:
1f:db:05:50:e1:18:db:00:4a:9b:4a:79:fa:dd:7c:f5:0f:7f:
83:7e:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client