Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: lbjCvMX8VLbJyKPGMvaI1LzQ50AAREXfr9cBnczhLe0=
Subject key identifier: 73:52:69:0D:62:58:D6:9F:2F:B0:A5:E3:F0:F3:9D:CC:D5:D3:0B:A9
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 0194BC05152218A405BB3E7BD7A32B2BA8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: UI5NClozL7N-roh3gFDdU89Og_s.roa (hash: 16lVaEuPmCyL0CMlUsRZ43ZBzj6hUjHan0Mt9THux/o=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: VWJ2owuGVl9vS1bMeA4vXDmB90yurYQ/fFXCSc/UueU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:22:18:a4:05:bb:3e:7b:d7:a3:2b:2b:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=7352690d6258d69f2fb0a5e3f0f39dccd5d30ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:e9:6c:61:19:e7:57:6a:65:85:19:22:54:
26:db:df:e8:ca:03:18:c2:63:63:e3:91:1e:57:02:
d7:5f:2a:56:50:d0:69:fc:61:1a:96:c2:fb:a0:8a:
d7:4e:8a:40:aa:56:bb:70:10:10:bd:83:59:6d:f4:
01:6e:da:0d:2b:7b:a5:77:09:9b:da:e8:20:40:43:
ff:55:22:9d:42:83:29:9d:12:2b:96:96:93:93:6d:
49:65:fd:9b:ea:8e:22:b7:6a:fc:5a:73:2a:28:8b:
3c:73:84:78:64:6d:5f:1c:cc:bd:bb:d0:47:c4:31:
02:32:0f:ef:79:f9:66:e6:73:b5:aa:d4:9a:c8:3c:
76:e2:dc:dc:bf:e5:b0:b9:a0:3b:2a:64:30:2d:fc:
d6:61:d0:ec:71:b6:16:f4:2a:a0:a0:35:46:6c:0b:
e1:e6:ec:89:b1:b7:61:35:c8:6f:60:21:bf:fc:03:
0d:ae:b5:3c:5b:3b:36:0b:6a:66:7e:70:2f:fa:dd:
6c:67:d7:db:69:9b:17:2e:a2:84:5c:d7:b8:b5:83:
6c:b7:2d:5f:c5:85:1a:53:a2:43:f4:14:05:a6:01:
b5:10:99:31:e7:0b:f7:e8:1b:29:60:4a:8b:71:e3:
a6:7b:63:0d:82:3d:0c:cd:ea:71:d6:96:50:1f:56:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:69:0D:62:58:D6:9F:2F:B0:A5:E3:F0:F3:9D:CC:D5:D3:0B:A9
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2a:4b:16:14:60:5e:b9:55:55:9d:cd:ee:d0:4f:5d:84:ad:
73:1d:74:04:96:59:7f:c1:38:32:75:31:4b:b2:9a:bf:37:7a:
8e:f1:68:c1:7d:81:ae:f0:22:17:46:18:54:2a:72:1b:0c:64:
86:eb:b7:e6:80:3b:76:cd:14:ae:ec:14:e1:6e:bd:54:35:2e:
ac:d4:e1:96:60:d3:73:db:7c:10:93:82:b5:67:4d:64:45:44:
b0:82:51:4b:84:ac:d9:da:79:41:28:09:2e:a0:a9:98:e6:d3:
e5:96:ba:3b:c2:bf:e2:f4:76:74:f0:74:0b:f4:23:6e:f7:ea:
c6:45:22:0c:dd:e0:cd:0e:18:b3:2c:71:a8:b8:48:3e:2b:64:
79:24:cf:d4:44:b1:b6:e0:13:ef:66:57:3d:b8:3e:38:9f:04:
6b:cc:e8:98:2f:66:24:cb:53:33:d1:02:db:f7:3c:c1:a3:29:
ec:e9:a2:a9:97:17:fb:a1:2b:00:3d:23:ab:a2:73:b1:59:1b:
dc:74:57:96:35:b0:dc:99:f2:9c:88:78:7e:94:b9:2c:fd:fb:
f6:69:c8:de:2d:bc:fb:13:51:be:3a:a5:a6:ea:bd:40:b2:58:
48:26:32:cb:03:f5:56:e7:f6:1d:c0:5e:c5:ee:7b:75:08:18:
da:3a:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:52 2025 by rpki-client