Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier: K6Fkl4BM6IhOWg7hi0QsAooxFZ3Kj80gAW6ZY2lO+q4=
Subject key identifier: B9:9C:E4:DD:26:AF:5B:16:6D:C1:30:7C:86:E8:B6:46:31:A9:0F:64
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer: /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial: 0194BD175E71CE17892F60FA4EF04BB763BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number: 1156
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: ywQr5x6KzRYgOULes8iPLkjgaVwv/4ekno4xZj+Tf3M=)
2: rz-RdiM9IWT3IB5wGzMs1ZBSN0Y.roa (hash: o6qyEqxDzSGkgBN+te6/IqxauC6oKPYhjWorkJVF6Cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:71:ce:17:89:2f:60:fa:4e:f0:4b:b7:63:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=b99ce4dd26af5b166dc1307c86e8b64631a90f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:61:db:15:6e:f9:48:b4:b6:03:5e:6a:1b:
3d:c0:8c:b4:db:4b:fc:4f:54:1f:c5:2e:cf:06:ef:
b5:9b:78:82:9b:cb:b9:01:0a:aa:f9:d3:3a:ad:fe:
c4:9f:ab:b5:f3:73:a6:8b:7c:08:a1:2c:82:2e:18:
d4:69:39:22:1c:b3:89:c1:07:13:64:78:64:ab:b4:
94:b3:14:bd:46:fb:a7:8b:0e:d6:0b:67:6b:3f:fd:
28:df:37:bb:4a:5b:2f:82:a8:28:aa:af:15:64:cf:
2a:8c:e9:c5:ed:47:6a:ff:39:b3:15:3f:8b:02:62:
b3:c4:de:42:a3:30:90:12:cc:22:db:5a:de:33:98:
dd:d6:ad:db:c7:b7:6f:61:8c:4d:12:a5:27:ee:e3:
1a:5a:71:82:1c:89:73:26:68:e1:c5:0a:4e:bf:01:
45:75:5a:21:c9:3a:49:7b:56:0d:3f:b0:d7:f2:a9:
dd:7c:9e:bb:36:d8:34:0c:cf:50:f5:11:5f:06:26:
5f:17:1d:71:5a:36:9e:85:1a:b4:dc:b6:a5:a7:16:
e1:c5:ba:7b:b9:db:4c:93:1b:f2:2c:0a:0b:f7:a0:
2d:c4:11:8f:56:9e:f3:e8:93:4c:52:48:75:8f:ea:
5f:05:5d:0b:77:0b:26:4d:47:80:1c:4a:c5:3a:08:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9C:E4:DD:26:AF:5B:16:6D:C1:30:7C:86:E8:B6:46:31:A9:0F:64
X509v3 Authority Key Identifier:
keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:0c:a7:63:c4:7a:12:89:1d:84:49:3a:27:d4:67:36:dc:
7f:37:ca:e3:0f:93:f3:ba:45:67:dd:fb:6a:00:f1:cf:64:9e:
88:82:9e:f6:c5:d6:7e:14:ed:a3:07:6a:10:83:1d:8e:2d:04:
9b:7d:45:c3:89:40:4f:28:f4:ec:26:f7:8b:d6:35:5b:c6:3d:
9d:40:63:a2:81:a6:63:d7:a3:40:26:6e:5d:ad:33:45:55:03:
96:b7:01:72:dc:20:72:f1:5c:27:f9:d0:f3:0a:78:d1:f5:95:
77:39:f9:82:87:4c:32:fb:8b:5a:c4:4c:f8:25:6f:0d:ff:26:
c8:90:19:90:2f:45:7f:19:c2:23:96:fd:a4:45:83:c2:4c:e4:
07:54:35:59:3e:e7:ad:58:0c:a3:6d:56:89:cd:1a:41:74:88:
5b:7a:01:fc:b9:9c:62:be:4c:b1:dd:ab:15:22:da:41:70:98:
70:8b:b3:8c:23:da:9b:5a:bf:c3:38:82:4d:45:5d:da:98:69:
5c:58:4b:c6:27:ab:c8:f1:6d:75:e3:a0:b1:4b:31:5e:59:0f:
a7:62:80:cc:dc:00:57:f3:ff:70:af:65:31:66:9b:c3:c2:02:
91:33:62:0a:c5:fa:ad:44:8f:af:1c:ee:37:8d:8e:c9:98:87:
f0:b0:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:30 2025 by rpki-client