Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
File: qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft (raw, json)
Hash identifier: dsojiIfwsa4o9tllLNuCoehDwIqttJOWKDeqnQIg4Ks=
Subject key identifier: 01:BD:DC:00:0C:10:89:03:35:B1:B4:86:EE:00:99:23:E2:B9:6A:C2
Authority key identifier: A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
Certificate issuer: /CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Certificate serial: 0194BC04CF8BC382E73564370BFB2D59BB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
Manifest number: 0321
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 6hC6fLsw7RkIS-s8k9SPmezW7a0.roa (hash: VC8L1ZPAknfqgpBe50bw5lLJs0Ytomzt1toHwpXle7E=)
2: qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl (hash: 5MUO/+6RCX3Ks7AAc82crsKPQwWvQlZx+7e3WW5CsMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:8b:c3:82:e7:35:64:37:0b:fb:2d:59:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=01bddc000c10890335b1b486ee009923e2b96ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:c0:f7:bf:43:f7:16:ad:83:56:51:6a:93:
6b:d1:0e:70:04:5b:55:cb:52:39:b5:7b:36:c6:5f:
d7:fc:73:db:aa:cd:b0:de:bc:98:76:0f:5f:04:68:
20:cb:f0:fa:56:78:78:88:49:03:e3:8b:6a:72:c5:
91:d6:1c:87:ad:3d:df:80:7d:80:4f:e2:7d:f3:26:
9b:f0:79:3c:af:74:75:70:2f:70:75:b5:38:41:42:
94:a2:8e:9b:04:16:28:40:18:22:8e:0b:f4:79:b7:
e8:98:73:9a:f2:16:e1:ba:af:3d:3a:e0:1c:3a:21:
39:9d:7e:3e:07:79:c6:66:9b:4c:e4:8e:1c:97:5c:
da:fb:4f:e6:86:3f:2d:74:c2:42:41:6d:7d:d5:a4:
d3:67:e6:07:2c:5e:65:fd:e1:0f:1f:31:90:7c:e3:
23:56:12:09:b6:8a:a0:50:49:b7:10:3e:cf:c5:5c:
09:d8:84:4a:70:fe:3c:56:5a:20:7e:62:66:cc:ba:
89:1f:77:a8:c2:4f:19:25:04:8e:bb:c0:25:7d:75:
ed:c3:d4:25:67:19:3b:8f:5b:25:7f:7b:7a:f4:fe:
87:9c:84:cb:3d:2e:1b:da:d6:75:e5:b6:1c:01:12:
c6:bf:e2:f1:7b:59:fe:df:bd:c2:38:5c:51:c3:4e:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BD:DC:00:0C:10:89:03:35:B1:B4:86:EE:00:99:23:E2:B9:6A:C2
X509v3 Authority Key Identifier:
keyid:A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2c:f9:10:36:1c:2b:fe:17:43:14:fc:ae:0b:ed:0a:08:15:
f5:2f:29:c9:1a:8f:0c:d5:d5:51:d5:24:80:d4:f1:70:1e:d5:
d1:77:ad:c9:83:78:53:16:65:a9:6b:6e:6e:6b:f7:b4:0f:c8:
9e:64:36:16:db:0a:d6:1e:33:e1:fe:bb:77:43:d7:2e:4f:d9:
5e:08:48:4c:98:46:32:ba:40:fc:a0:3c:dd:35:71:f1:2c:66:
9c:f2:cf:32:8a:c0:19:3f:77:ca:1a:56:dd:f4:c6:69:02:fc:
05:b1:e3:97:5b:8b:b1:76:7c:1a:02:30:ab:0d:92:27:d7:ff:
26:19:c5:db:b4:b9:85:c4:c5:c6:11:ae:ec:c1:ad:f8:6c:9c:
46:be:36:54:65:5a:da:3e:dc:c4:57:02:ef:3a:c5:d6:f3:ea:
20:ac:e0:a2:c5:de:ce:03:68:21:8d:2b:30:df:8b:50:c2:54:
51:cc:68:67:05:76:ad:63:e4:a2:45:c2:16:85:d4:c2:16:26:
b0:c5:3c:7a:a6:8f:4a:52:ed:d0:40:c2:44:5f:9d:ed:cd:c0:
b6:e5:09:ea:7f:5c:ca:06:66:13:2d:97:7d:15:0c:b2:00:dc:
3d:58:95:68:b9:53:9b:eb:35:88:e5:5d:7d:83:36:e2:31:ff:
03:ae:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:11 2025 by rpki-client