Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: TxDlXsbk89GcBBFwqXtu++0WMXsDuNWp7IeOIl6UK7o=
Subject key identifier: 62:1C:CB:5E:A5:87:8D:F4:10:20:33:36:85:04:AE:05:2D:A8:00:09
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 0194BCE072D8C1303471A727695039638546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 07AE
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: WszDdLqe2/IQBPYB115hdMCCYFXgaNwIaZplo+WECHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:d8:c1:30:34:71:a7:27:69:50:39:63:85:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=621ccb5ea5878df4102033368504ae052da80009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:ad:33:10:69:94:c5:a2:7f:56:1f:d6:02:
b0:7e:4a:7e:83:77:ef:39:68:36:1c:9d:a5:2a:b2:
c3:2b:22:ae:6b:06:59:61:59:a4:24:e1:d9:80:88:
0e:67:b6:2b:8f:09:64:29:1c:58:bb:36:ae:10:ac:
34:89:0f:7b:50:06:8e:4c:ef:e7:8f:4c:44:5c:22:
36:cd:82:17:e1:4c:54:6b:56:15:5e:17:f0:14:b6:
de:0c:46:74:49:de:65:b0:49:44:d3:7a:05:03:94:
86:30:4c:96:88:cf:e4:df:c3:21:a5:49:d6:2c:2d:
93:3c:45:1e:db:c7:61:36:98:39:55:cf:e0:1a:ad:
75:6e:bc:ba:33:18:9c:b7:6a:e4:2b:c8:4c:31:bc:
bf:98:fc:59:51:5a:ba:3f:86:21:9c:4d:93:f6:53:
a2:6b:58:66:c8:26:b3:64:92:a3:49:ee:ca:c4:cf:
02:52:dc:e4:17:eb:6b:04:df:62:04:bb:51:d4:98:
8a:ae:4e:f0:52:42:31:32:68:a4:57:4a:d4:54:3e:
3b:cb:fc:2c:60:b9:45:37:19:98:09:02:54:8b:fe:
52:e3:f4:1d:e0:74:e7:d9:03:03:ce:a0:0a:13:6b:
54:c6:70:63:9c:c2:51:88:ee:0b:80:73:54:07:a5:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:CB:5E:A5:87:8D:F4:10:20:33:36:85:04:AE:05:2D:A8:00:09
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:cc:0b:4c:bd:fa:28:da:7b:fc:bc:dd:0a:c2:91:5b:97:
d4:b5:83:71:34:a6:cc:07:a4:b7:61:1f:55:9e:f2:4d:1c:2a:
a8:74:e1:9f:0f:11:fa:ff:fe:45:7a:c2:47:c4:94:6f:d4:b5:
11:93:bf:f4:35:f6:d6:f5:8d:49:ed:4c:8d:ff:96:0b:15:0d:
64:36:64:7b:dd:59:1d:e8:30:f6:5a:fa:9e:f6:05:a3:be:c6:
4c:06:18:00:fb:bc:23:6b:a1:70:49:09:ab:ce:d4:c7:b8:2a:
28:ec:22:5b:1f:cc:29:d8:54:2c:43:71:76:29:de:88:21:63:
9e:35:c2:ab:c2:de:26:2a:b5:53:ea:f4:bc:b7:a7:72:e3:2f:
94:a8:41:98:2f:7e:a5:66:28:5c:ba:f6:0d:f8:1b:d0:26:54:
d0:4d:b2:eb:a5:aa:20:f9:5d:ba:69:6f:92:f5:88:64:ee:72:
aa:e4:53:4c:89:6a:d9:ff:de:6b:b9:d3:db:38:67:12:07:18:
7f:00:68:8b:49:a6:a1:0c:3b:ba:e5:52:b9:e0:18:7e:46:aa:
f6:16:e0:ff:16:e7:66:38:3c:dd:00:e0:3b:e4:31:25:86:e1:
da:86:4d:6d:9e:fd:88:42:02:0f:9b:9f:87:ce:69:85:bd:ed:
ed:d9:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:10 2025 by rpki-client