
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: MWw2MVDiSoLs6+Q404lGaLo7PrqYtR4uQFATnO5WiRw=
Subject key identifier: 95:22:14:E6:C0:6D:1C:1C:D8:85:67:70:53:29:BF:57:1B:CE:C5:9B
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 0194BD859DBA25FCC8BBF72152FD0DAB1186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: SAyFuyZLbO3x2barGthmgZW6ZjVxk1QoEwAawehb6Jk=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9d:ba:25:fc:c8:bb:f7:21:52:fd:0d:ab:11:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=952214e6c06d1c1cd88567705329bf571bcec59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:a1:cf:15:c3:63:27:33:70:4c:77:30:2f:
9b:ad:b4:fe:7c:68:3e:9c:57:9f:23:af:8e:97:df:
81:15:ff:b0:01:cf:ee:22:46:03:3d:20:36:34:2d:
35:f0:3a:21:d9:03:b5:13:98:02:45:08:4a:72:1c:
73:da:48:46:f2:72:97:b0:8e:d5:bd:5b:69:4e:3e:
29:07:a4:b1:a5:e8:17:77:68:06:da:ea:e1:c0:90:
fc:9d:2a:af:da:65:0c:22:23:33:09:f2:7c:76:43:
97:0d:fc:78:b4:63:ce:76:2e:44:84:a9:ed:5d:2c:
93:35:5d:20:77:3d:bb:88:9d:31:7a:7e:79:8a:1f:
95:0d:3f:5b:4f:f8:71:70:d8:a2:17:f2:bc:48:c9:
da:0f:fb:0a:19:d8:3b:0c:87:72:8f:62:12:67:06:
94:b4:a2:a7:fc:0c:1e:04:d8:b5:b7:a0:f3:a2:42:
af:94:ee:af:94:35:15:c9:49:d5:26:14:75:fd:88:
f6:6a:60:d0:50:f5:24:83:e2:32:4c:48:30:8b:d1:
25:54:28:fe:8e:74:32:db:2f:91:d5:55:5c:f6:10:
e4:ec:ea:47:50:a6:fc:c3:8d:b6:05:2a:1f:0a:1a:
d5:87:ad:65:5d:d4:d8:6a:c2:8c:08:e6:af:83:61:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:22:14:E6:C0:6D:1C:1C:D8:85:67:70:53:29:BF:57:1B:CE:C5:9B
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:be:ae:1d:14:bb:a0:a3:73:c8:bd:db:d6:8c:d8:c5:66:84:
fc:ef:5e:e4:56:2c:6d:33:5d:ea:fb:81:e1:04:5e:6a:09:fa:
b6:cd:7b:34:c4:17:56:53:1b:49:b8:87:28:64:06:fc:f8:fe:
50:a7:43:ab:c6:e7:3c:cd:81:1b:82:fb:bf:1b:85:79:61:d2:
bd:44:09:b2:6e:77:38:46:d3:bd:7a:3e:69:fb:b3:64:1a:7d:
02:8c:83:ac:d2:d9:1b:2f:2e:14:7d:d3:9c:77:72:8e:78:d4:
e7:5f:f1:55:9e:98:5a:b5:32:c4:1a:b5:f8:86:6e:24:ef:a3:
c2:30:90:31:41:5e:77:7b:34:4c:36:b6:c8:10:e5:d9:38:89:
2d:7d:26:02:69:7d:7f:e1:4d:b2:33:47:26:31:59:70:94:04:
62:23:55:fd:a9:bc:5c:76:92:ea:c1:53:83:1f:36:d1:0c:56:
3a:a2:c5:25:19:73:3a:1c:7a:76:44:a6:2b:cc:8d:0e:5a:5b:
11:a1:0a:6e:b1:27:e1:d2:2c:34:bb:54:29:5c:8e:6b:cf:0d:
53:8c:9f:78:e5:5e:85:f2:e1:4f:3a:1f:4c:bb:98:c1:ce:db:
a0:4e:00:1a:45:6b:e1:40:17:c1:8f:d1:ac:cc:a8:59:8e:23:
79:51:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:06 2025 by rpki-client