Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: FnphACV//MVqzZa82KplxpUGzTfnnZi6Zr7geit/Ojg=
Subject key identifier: 6F:87:22:78:A4:A7:46:04:A4:9C:64:8F:C7:21:9A:1C:87:CC:03:C0
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 0194BC731589B9D482BCF7103D7A6688B3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 02F6
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: ISA1vmEy+261wyfGjIWQWqxDwa8A3mGLQ3Xv45OYhfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:89:b9:d4:82:bc:f7:10:3d:7a:66:88:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=6f872278a4a74604a49c648fc7219a1c87cc03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:41:ea:a1:9e:54:d7:75:86:7e:34:bc:1c:
a1:28:44:93:91:55:ce:d9:5c:0a:4f:a8:fb:1d:b2:
5a:dc:84:f5:84:78:1d:2c:f5:71:1e:d0:91:48:45:
18:81:ee:c6:5e:79:0c:37:2b:0c:e1:7a:f3:d1:70:
5c:9d:fd:3b:95:aa:60:1b:4b:f6:4f:b7:19:35:3c:
54:04:35:a3:06:38:52:01:e7:2c:3b:14:a6:2d:1f:
a3:85:79:53:b3:e9:1d:ec:b8:7c:32:f2:e7:75:7d:
34:28:ab:42:3c:2b:2b:f3:66:04:20:4c:96:ae:a9:
1a:80:30:5f:13:0c:04:5d:c1:0d:94:2f:23:d3:6e:
5b:61:27:3c:e6:b9:80:32:b7:65:ff:af:13:72:dd:
1d:a3:ec:80:df:79:8b:f5:6d:30:68:8a:c8:ad:b3:
fe:76:81:68:d5:5f:31:ca:cf:53:79:9e:ec:df:5f:
02:b8:65:e1:3b:e0:2e:94:69:82:68:0b:3b:c7:56:
ca:83:1c:2e:3d:91:d1:ff:d9:e7:24:06:ba:e0:cc:
7e:e4:63:e4:18:a5:36:e1:d5:08:7f:90:4d:25:dd:
7b:c5:30:d3:63:68:7c:f9:21:b4:88:0a:f1:a5:2d:
d6:40:22:a1:22:f5:4e:8c:79:c3:1c:d9:86:8b:ff:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:87:22:78:A4:A7:46:04:A4:9C:64:8F:C7:21:9A:1C:87:CC:03:C0
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:86:0b:ba:e5:42:6a:1c:ad:28:d0:e8:07:ef:23:08:a9:
82:99:5b:5a:85:8b:15:a4:6f:32:90:e9:3b:be:17:39:bc:4d:
b8:d0:b3:19:75:c1:e9:a1:df:41:08:a2:fd:9a:a0:3d:cc:23:
40:21:9f:71:a5:19:41:03:9e:bc:4c:2c:eb:5a:c1:0b:16:62:
e8:47:da:42:7d:31:64:f1:0b:21:80:c6:3c:2d:ad:27:65:86:
a6:e5:cc:b4:94:b1:a2:1c:f7:96:37:a4:b4:2f:b6:c1:ce:62:
dc:cf:68:23:06:56:1c:c2:a8:d0:71:1b:ae:a0:4a:7b:a2:77:
ed:1c:6b:05:c6:0a:1c:58:9d:a1:e4:f6:af:06:c8:cf:23:6f:
26:65:0f:ea:d8:27:9c:6f:26:a4:b7:6f:fb:d5:f4:81:a8:f9:
9f:5a:4a:1c:23:87:b5:49:fa:88:76:97:cb:8a:06:7f:00:99:
4c:70:99:a4:99:b4:bc:6b:37:de:ae:44:8a:11:28:55:f9:d0:
ae:2b:f6:4b:bc:ea:b1:c7:eb:d7:f4:61:a1:43:25:c8:7b:3a:
fa:bf:2d:3e:83:b5:df:1c:c6:af:36:f5:5c:68:89:ee:77:ba:
7a:b1:a9:76:6d:11:8e:a6:89:ab:16:ee:5e:dd:1d:8b:00:3a:
7b:fa:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:32:02 2025 by rpki-client