Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: 96PjjJRpGTplLaoBb34Y4XqmLKeLK4v2F0d6YVHR/Qo=
Subject key identifier: 02:CF:18:D4:AA:03:5A:8D:44:FC:B4:AE:8D:5A:BF:72:11:A6:05:24
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 0194BD4E680A7E653BAED79269BC2ECFA331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: s+paOJXCVt+F4s7kp8gpB2gqon4VbtBQ0HumUbs1wdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:0a:7e:65:3b:ae:d7:92:69:bc:2e:cf:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=02cf18d4aa035a8d44fcb4ae8d5abf7211a60524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:99:99:85:68:50:93:88:a8:a7:43:5f:14:
6b:ea:d1:43:55:de:12:4e:6f:de:be:ef:3f:03:11:
57:f3:4c:cc:b2:45:48:04:1e:41:ec:14:2b:69:01:
e1:b4:1f:da:01:9e:38:0c:6a:3a:d5:fb:7e:5d:c5:
9e:d4:15:40:47:c4:06:5f:66:24:41:37:a9:5a:57:
b7:8a:23:f3:00:1a:d3:23:24:09:ec:bc:05:3f:4e:
5e:73:7d:e3:d7:c6:79:1c:89:94:69:c8:39:78:0f:
2d:7b:15:f0:f5:17:e6:14:51:d4:e2:b3:b8:57:64:
50:35:8f:15:2f:35:96:b2:60:50:ed:5c:61:ed:99:
67:f7:a7:88:cf:45:03:07:c1:ae:08:92:3d:8a:80:
2b:b3:dc:1f:2b:04:cc:d2:1d:37:9c:bc:85:61:a0:
b6:7a:f7:80:88:34:a6:05:42:b6:be:ba:89:99:f8:
b9:3d:0b:a1:38:5c:62:bb:f3:b3:c5:89:cf:f0:82:
f2:81:8b:89:8a:ba:6c:2e:4f:31:fa:d6:b5:eb:c1:
ad:6d:b9:3e:4a:75:f4:0b:b7:36:2c:bb:b9:0f:a4:
0f:4f:6f:a8:f6:7e:49:cf:ff:d7:24:15:41:d6:ea:
ea:a4:0f:96:b0:03:5e:70:79:ca:c0:da:ab:d2:8a:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:18:D4:AA:03:5A:8D:44:FC:B4:AE:8D:5A:BF:72:11:A6:05:24
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:81:0b:22:cb:a6:c4:f6:55:e4:83:31:6e:0b:0d:c7:36:
32:08:e3:4e:06:c3:5e:c6:23:7e:b9:14:d6:e6:fd:97:4b:c2:
96:5c:81:2e:4a:67:60:e0:dc:53:e1:5b:0e:d0:af:db:3f:22:
12:02:1e:d1:5b:bc:4e:69:98:29:c6:dd:d8:33:a4:33:40:6b:
b9:8b:d5:c7:e3:99:b0:b8:ea:c6:f7:30:e7:8f:7a:c8:9e:70:
f8:b1:78:f6:16:aa:4a:20:15:5e:b7:b2:01:5a:e8:f4:bd:0a:
f0:f7:42:1e:21:f7:70:02:0d:0c:8c:f7:84:50:7f:c3:e9:c2:
09:77:1e:c0:1b:79:62:cf:a5:ea:26:12:b6:bd:d6:d5:6f:6a:
5d:9e:25:d1:51:f7:66:35:88:30:f8:82:2a:f5:68:6d:3e:1c:
31:34:ab:e4:6c:7a:7a:c8:39:19:18:71:02:23:6d:f2:db:43:
23:0c:bd:b8:e3:8f:69:54:38:62:59:87:47:24:22:b1:05:59:
42:64:d6:94:5b:94:7e:16:9d:74:94:95:ea:4e:2f:c4:6f:9f:
1b:6e:32:f5:a3:6c:90:2a:07:c9:70:ac:57:a2:98:77:9f:84:
a7:71:34:67:57:a9:64:b2:cd:98:ea:6c:a6:e8:ee:04:13:7f:
1e:62:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:44 2025 by rpki-client