Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: WGh2Xxk+uEOhsUfnFoxB7IsqQ1tvIHBIgDKDl6kdyDQ=
Subject key identifier: 3B:EA:BE:07:6F:67:3A:45:41:83:E3:B1:56:79:24:25:40:4E:F0:FD
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 0194BCE0DDE86C3A5494C1AB251F30D19890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: GNnpqwUhGuCqloWLNjioVJUBAMySAtF0525Y4P+ke3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:e8:6c:3a:54:94:c1:ab:25:1f:30:d1:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=3beabe076f673a454183e3b156792425404ef0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:e4:a5:68:94:e8:5c:b4:ab:1f:0a:4c:76:
59:38:1e:84:bb:71:c7:ff:8d:af:8e:c3:a2:4e:18:
ba:a8:68:ef:15:c3:12:bc:59:61:4d:08:33:71:10:
3d:d0:94:67:95:b2:c0:1f:8b:1f:0b:47:c9:79:ea:
ce:e8:0d:5b:3d:be:36:8a:d3:de:81:48:93:9b:cd:
72:de:46:98:06:cb:f3:0a:37:a0:63:28:a5:49:6a:
46:5b:be:1a:d6:01:0c:29:06:fb:a5:3b:64:bf:66:
e3:87:a4:74:91:ca:ad:06:59:a5:39:e5:5a:ca:4c:
f9:9b:d0:8d:22:ab:83:ad:0d:4c:33:4b:ed:41:e1:
d5:bf:0d:5d:17:0f:84:e9:48:37:1e:a0:b0:4d:85:
60:86:70:12:b6:b6:c7:01:59:62:8c:6d:17:f5:34:
6e:c5:e7:10:17:97:01:51:b8:7e:20:57:eb:c1:0c:
97:31:49:52:ec:14:aa:2d:5b:b4:df:4e:0c:c7:d4:
24:c8:88:67:c3:23:76:fa:b1:a8:ef:28:34:6f:2e:
65:d9:f4:c1:85:12:46:c3:82:49:fa:e8:8b:f9:14:
7b:86:be:da:40:60:e6:79:bf:4c:82:8b:88:ef:1c:
9f:8e:c0:f2:42:14:de:c4:3d:5b:4e:8a:f1:0e:74:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:BE:07:6F:67:3A:45:41:83:E3:B1:56:79:24:25:40:4E:F0:FD
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:21:13:23:bf:ca:e4:0f:f8:c4:62:be:92:a5:5d:b7:a3:a8:
52:af:44:7e:50:9e:01:dc:bf:fe:cb:8e:91:40:51:44:20:68:
65:fe:6d:8f:18:57:00:8f:21:b2:ff:a8:58:d1:4f:ca:d3:e9:
21:0c:2e:ab:d6:7e:a8:96:9a:f0:ec:ef:03:79:9c:6a:8a:50:
64:44:af:9f:38:ba:bd:17:b9:ab:de:8f:4f:13:fd:b4:96:c2:
3a:44:d3:46:a9:1e:7e:3a:fc:4f:0b:ad:1b:59:5f:a6:49:6e:
17:5e:47:65:87:12:76:fa:4e:84:f7:37:42:98:cb:44:99:1c:
45:c0:6b:b2:4e:47:2d:45:91:b3:99:85:c3:da:28:63:97:ed:
46:02:61:70:e1:2f:7f:bd:6a:64:c9:9b:c7:b9:61:da:59:07:
e0:43:89:ec:b2:d2:19:72:a6:52:15:cb:4b:85:83:25:1b:95:
a1:ce:e6:19:b5:ad:d8:20:8b:35:c8:eb:ee:ed:cb:01:0f:4b:
5f:6f:a7:aa:2f:ec:7d:9d:30:fb:d9:9e:10:0d:ab:97:b8:8d:
12:1e:36:5a:34:86:84:72:18:85:94:34:c1:fb:bb:9c:41:fb:
87:88:2c:ac:99:62:5e:68:39:0b:d4:22:d4:93:15:25:05:1a:
56:98:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:32 2025 by rpki-client