Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: wu/BgVywrpLQcv38IrM7yi5hG/dMIJXJakzRbkX+1qI=
Subject key identifier: 6E:79:C8:87:EE:48:F4:06:E6:96:69:95:DF:EC:8E:CC:4F:AD:E6:BC
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0194BCE09150668AB2DA06D9449A7DC03585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1279
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: a7lahSuWvu5zYEo/XnXkwkoUelRcZQvK08xmWsEsh4k=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:50:66:8a:b2:da:06:d9:44:9a:7d:c0:35:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=6e79c887ee48f406e6966995dfec8ecc4fade6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:64:01:5e:23:12:80:35:be:cc:97:41:6d:
75:80:59:31:64:b9:61:d7:99:d1:f5:04:7a:61:db:
d6:35:98:45:2e:44:a7:72:b8:0d:09:e5:86:7d:f6:
85:20:d1:55:e1:37:d3:d7:33:5f:1f:f4:05:7e:f0:
f5:51:5b:65:a0:1a:db:4e:f3:17:65:95:f9:cd:c0:
c1:42:af:4a:c8:56:0c:e3:59:dd:82:bb:9f:2d:a4:
c2:09:4f:0b:9a:2d:2d:93:6d:a6:20:43:35:4a:20:
4e:b0:19:2c:74:aa:70:f3:55:f4:2e:87:a0:f3:1a:
52:f8:a8:6a:ce:0d:66:07:a2:38:7e:c3:95:d5:31:
18:27:1a:8c:b3:ad:e4:34:f1:45:2e:8c:a7:0a:67:
02:1f:9b:a0:4b:0c:9d:6d:d5:ce:e7:d9:da:8f:ca:
4d:70:b7:69:77:9d:ae:17:1f:14:d9:e0:db:71:fd:
57:0c:b9:9f:ca:0c:be:f2:9b:b7:5a:c4:a5:4c:52:
1e:38:18:4c:e8:33:c9:6d:43:52:13:b4:e8:f7:62:
f1:59:f6:04:52:ee:fc:44:4b:34:3c:66:5e:73:84:
3e:d1:b5:26:75:55:da:bf:56:c8:7a:7f:ee:fe:24:
f3:31:fb:1a:b1:ee:d0:2d:4c:e0:53:e2:08:51:46:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:C8:87:EE:48:F4:06:E6:96:69:95:DF:EC:8E:CC:4F:AD:E6:BC
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ee:d0:2d:62:62:eb:be:c0:82:94:78:ba:74:5a:ed:54:2d:
85:63:d2:b9:4a:7d:53:a6:55:54:72:26:af:f4:07:85:63:0b:
ce:60:cc:43:96:05:10:38:e3:e6:11:f2:ac:25:b7:e1:06:99:
e6:c0:f5:a1:e1:8d:16:8a:73:00:54:32:e5:de:23:58:39:68:
b2:ac:ad:84:a8:ff:0c:c3:f5:d4:84:e5:51:96:95:72:46:db:
b4:bf:5f:5d:fc:d4:44:48:ea:01:61:ff:18:0b:6d:5f:fa:81:
d3:de:9b:14:70:c0:4c:50:84:16:f9:95:73:cf:36:03:c6:0a:
7c:4a:39:65:44:c1:5c:3f:8e:38:c7:e3:8d:26:57:3b:b7:0a:
0d:a0:7a:64:8f:95:9b:56:a2:cf:7d:7a:d4:fb:b2:23:e1:c9:
e9:54:d2:68:22:e6:48:58:f0:8a:a5:58:df:0b:bd:6e:48:c5:
32:db:f0:07:09:18:52:d1:63:7b:28:68:a7:79:e6:62:55:f2:
a4:1d:15:f0:cd:e6:93:f3:5b:b3:f5:ba:63:85:fa:b9:40:52:
9b:5c:8f:7a:b0:9f:a2:77:40:d8:94:4c:03:2b:40:30:d0:f7:
e7:5a:18:15:99:2d:97:bd:ef:d8:83:81:db:3e:e7:05:67:b5:
94:f3:0b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:49 2025 by rpki-client