Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft
File: KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft (raw, json)
Hash identifier: +hpQe5eS4VlwI+0YEPOoluiTIVFZhJ1MKpW5c6HV89w=
Subject key identifier: C6:DC:03:72:2C:CC:97:0B:26:52:1E:1D:8A:2A:35:56:00:C6:F9:FF
Authority key identifier: 29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
Certificate issuer: /CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Certificate serial: 0194BCAA11D824CCD9979A2C026FA173CBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 8U2ACQzYPSPV3L5sSEkKCsB8pBA.roa (hash: ZbH4IgJyW8KkApU2bDE8XFDW+P9+bjUQNudFm1PbyTE=)
2: KQH1AZqXC6W-DHVNIPeGcYGPSi4.crl (hash: 8Zup2uYM7FHrj8ZiEQq8WXfsO5yiwUuGSJUZ4tvA5Ic=)
3: Ra0sgLWf3JdJbcM4jauXm0fPx4g.roa (hash: ymRkXWhwSlWVwmfkCY22bMBdImNrCEWfsZ+bTko6SjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:d8:24:cc:d9:97:9a:2c:02:6f:a1:73:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901f5019a970ba5be0c754d20f78671818f4a2e
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=c6dc03722ccc970b26521e1d8a2a355600c6f9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:25:06:d2:42:7a:3b:c0:c9:07:01:42:d7:
8f:dc:70:b0:d0:63:f7:b2:25:58:dd:e8:f5:6e:77:
07:a6:25:33:21:4a:3b:7d:e4:25:10:ed:ad:11:db:
00:8c:b7:b8:61:01:4a:20:27:87:9d:86:c0:13:a9:
33:d8:81:4d:66:ce:24:5f:51:27:3b:5f:a5:d6:ff:
92:55:56:3a:82:76:1c:e7:5a:8d:49:f0:f2:91:e6:
48:f1:f7:fb:93:2c:c4:70:16:a5:27:61:2b:7e:07:
e3:c4:4c:05:0b:37:f9:50:bd:86:05:20:b7:46:fe:
e9:22:74:67:1b:26:b2:06:08:b9:89:9c:7e:21:06:
3d:7e:ff:7d:48:20:8a:da:45:91:74:6e:06:f2:4f:
f1:c3:d0:94:9e:25:6a:fd:64:9d:5e:4b:0b:f3:b5:
84:ab:80:2c:87:fd:a7:83:f1:0f:55:c2:98:c8:a5:
a3:61:63:a7:3d:17:37:30:9d:1a:86:35:58:59:46:
d7:ab:12:e6:8d:14:bf:d4:29:97:06:5d:2b:a4:81:
0c:e5:5f:9e:7d:df:ad:63:b9:a2:96:59:f9:13:68:
39:9f:39:50:75:6b:27:4b:8c:06:8d:b6:e3:46:6d:
c8:0a:96:1f:0f:fb:2a:1c:4a:70:14:83:72:3b:92:
70:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DC:03:72:2C:CC:97:0B:26:52:1E:1D:8A:2A:35:56:00:C6:F9:FF
X509v3 Authority Key Identifier:
keyid:29:01:F5:01:9A:97:0B:A5:BE:0C:75:4D:20:F7:86:71:81:8F:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQH1AZqXC6W-DHVNIPeGcYGPSi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/27b62e-3639-4e74-affe-2b2f2b8908cc/1/KQH1AZqXC6W-DHVNIPeGcYGPSi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:bf:45:92:3a:cf:4b:e2:08:cf:4a:d0:85:17:f8:e7:d3:9b:
ee:92:87:3a:ae:d2:4c:1a:e1:f5:77:04:06:dc:a1:77:35:ad:
4d:9e:82:d8:fe:67:13:ff:93:28:e9:8f:19:38:a1:2c:a8:a7:
8e:73:6a:19:f2:51:93:7f:5e:58:b1:9c:07:8f:c6:4b:d3:60:
9c:ac:00:8f:6a:07:24:e7:7d:78:98:fb:81:03:d4:9a:b5:65:
81:13:22:d7:d9:a1:17:8b:95:06:8e:54:02:33:de:ff:c7:83:
98:ab:92:78:a5:87:16:63:ef:d7:32:10:1b:8c:5e:f5:97:34:
c2:bd:27:7f:34:0d:ef:39:ea:76:ec:0c:80:74:11:fc:68:84:
31:ba:6c:5c:46:e8:67:19:8c:3b:e8:c3:36:ca:b7:28:04:8b:
79:29:b5:a1:3e:d5:01:ff:ae:4e:92:4c:b2:24:a1:e3:b3:8b:
69:23:01:43:88:cc:bc:07:5f:24:4f:e1:a7:b5:70:fa:5e:d9:
ef:91:8a:44:30:c5:af:26:e0:70:f3:70:2f:74:06:7f:2b:ff:
f4:fa:04:fc:40:75:ce:bb:9c:9e:b0:5f:d8:75:e5:2b:71:08:
d7:84:4a:97:c9:46:58:7b:6c:12:da:90:9c:0e:2d:13:4a:05:
9e:00:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client