Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: kzSsdO2w9WhsKiUl/trJ8EqGe0vmsKz6WewA8EfPCn4=
Subject key identifier: 3D:9D:CB:B5:C7:B0:B0:A8:91:DF:A9:8E:8A:D9:65:24:CA:38:D9:BB
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 0194BBCE2741F67F1EF98D0031F83162B431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: hIIGMJpxP5/UiF9S9teq6l1IgOu7klwZptLUYK/d0P4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:41:f6:7f:1e:f9:8d:00:31:f8:31:62:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=3d9dcbb5c7b0b0a891dfa98e8ad96524ca38d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:e1:07:45:dc:65:3a:48:d8:ce:2a:0c:56:
87:ae:a6:5b:54:b0:ed:19:97:53:43:c6:94:17:88:
1e:7e:bf:d7:8d:62:ca:6d:8c:b4:77:ac:83:60:a1:
b9:9f:71:89:b9:3c:1c:a6:0e:14:79:be:95:d3:df:
89:cc:89:55:d7:8e:6c:aa:8c:8e:3b:50:ae:04:db:
fd:dc:58:cb:f4:1c:51:bd:51:a4:56:e6:7e:88:cc:
b8:47:00:46:aa:5f:c8:78:1a:e6:94:e9:68:c9:fb:
09:3d:d9:0e:91:c4:26:bf:40:e4:5e:09:84:e9:85:
44:cf:89:f4:47:27:67:1d:22:6a:f8:3e:7d:c6:af:
24:01:35:2f:bc:4e:7b:7a:60:d0:af:ee:e7:41:6d:
c2:88:3d:71:2a:3a:34:75:a9:27:b8:af:9d:8b:d6:
3e:ff:97:21:fa:aa:2b:47:32:77:80:3c:43:d0:73:
ae:d0:14:17:6c:81:c3:34:82:32:7d:41:84:3e:01:
06:80:c5:34:21:54:ef:28:91:9a:93:43:22:60:77:
d5:42:fe:0a:08:8d:b5:35:ee:6c:27:bc:f8:03:b5:
56:6d:4f:0b:a7:07:3a:60:d3:fd:4d:90:4f:f0:39:
20:c2:d7:5f:2e:fb:00:cb:45:66:25:6b:77:be:5d:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:CB:B5:C7:B0:B0:A8:91:DF:A9:8E:8A:D9:65:24:CA:38:D9:BB
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d8:4b:f7:df:5b:60:78:11:5d:9c:07:94:47:32:34:a7:54:
5f:c1:06:b7:82:16:40:18:a4:55:36:a0:c5:4c:d4:05:8a:eb:
93:c2:b8:cd:c1:12:67:3d:f3:b1:60:b5:a1:8f:33:e7:48:90:
01:3b:2c:46:76:a1:23:9c:95:ae:3b:52:c9:00:32:9c:d0:65:
70:a4:3b:86:8f:0e:db:e0:70:db:b5:f5:02:7e:56:d0:38:c7:
3c:95:c7:40:ce:98:98:68:0b:6c:68:b5:43:5c:42:a1:91:6e:
a8:6b:95:32:71:a4:32:0c:3d:86:ef:b3:7d:b1:38:5d:8b:b5:
51:0a:2f:47:7a:f0:44:b8:11:f2:77:c3:0d:4a:22:44:67:40:
03:80:9a:aa:1d:fb:d3:69:09:ea:05:d5:d7:92:d1:81:a3:7c:
e3:bb:a5:b4:a5:52:99:8a:ab:1a:b4:ad:da:be:74:7e:64:66:
31:ce:11:b1:cf:e6:b8:cb:9a:33:7a:38:8e:4c:38:4f:c4:4f:
8e:18:50:36:90:76:5f:2d:b6:97:e7:d7:49:1c:63:41:8c:55:
4c:16:90:a3:3a:83:e6:b2:de:0e:58:84:68:c3:c3:7d:a4:49:
ae:01:86:86:70:95:db:ee:a6:31:d7:55:51:c1:a3:c2:b8:49:
b7:99:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:49 2025 by rpki-client