Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: KmPbVlSGDyodK1GzEaoHhq9Q9QSbEcgisyZ8lfJjjGk=
Subject key identifier: 0B:22:0F:54:82:74:29:18:03:B7:D2:DE:45:54:4C:A9:F3:BE:C7:59
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 0194BD175A21E2C585CE056070F770399124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 081B
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: tB/Q62rcMz8X9NC9JrdSTuhdzlPr6h5atUaZV9i7dts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:21:e2:c5:85:ce:05:60:70:f7:70:39:91:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=0b220f548274291803b7d2de45544ca9f3bec759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:e8:47:07:bd:01:c7:f2:d1:3b:3d:99:6f:
e0:e6:f0:ea:a3:cc:89:07:d7:32:ce:7a:56:e2:61:
ae:81:69:79:54:bd:d9:54:03:12:af:23:5f:6c:0c:
b1:13:13:88:bf:0d:1b:d8:f8:b8:1b:c8:85:6d:67:
95:2a:f3:5d:32:a7:e4:81:34:6b:ed:6a:ec:f1:fc:
0f:15:b7:d6:35:3b:40:e2:49:a1:90:b2:04:14:71:
45:46:5e:cf:f4:8d:7e:ea:84:07:f0:dd:47:0f:1b:
10:44:aa:ab:1b:95:bd:e0:df:e6:77:69:54:d6:00:
e0:c1:ef:ea:5a:3a:f7:7a:33:05:23:a3:50:75:e8:
fd:91:99:cc:40:f3:08:3d:6c:81:28:ec:2e:b2:3d:
b4:b4:52:77:37:7f:80:9e:5b:06:6d:fe:76:7e:05:
d9:8a:ed:06:60:41:b4:61:aa:c5:92:6c:8d:17:ab:
d4:e1:e6:d1:28:fa:f9:d0:b1:3a:65:c0:fa:3e:6e:
fc:f0:9e:d7:12:a8:79:cd:ca:60:b1:64:0a:5a:3c:
e2:dd:07:65:a2:5c:a7:05:76:4d:41:bd:70:4a:ec:
8b:c6:23:15:cf:33:4a:d9:a6:f9:66:11:75:3a:d5:
8d:3d:7e:cf:00:ac:20:b9:6a:fe:87:a0:9f:7e:6b:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:22:0F:54:82:74:29:18:03:B7:D2:DE:45:54:4C:A9:F3:BE:C7:59
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e5:64:70:50:9c:de:3f:40:ed:c6:a9:c3:6b:61:8e:d4:25:
16:26:30:41:a1:ab:4c:3f:67:52:33:e2:e7:08:42:91:ea:be:
e9:eb:27:12:47:5c:e1:3b:75:09:36:3c:2f:33:65:66:85:b0:
22:14:bb:8c:76:e5:fa:bb:21:54:d8:3c:76:ff:6e:6e:f1:73:
e6:4f:63:68:24:43:26:ec:90:b9:37:3e:1d:7f:09:c5:8d:af:
ed:c4:54:30:5f:3f:d8:3f:fa:a1:52:3a:92:9b:9c:ad:b1:20:
8b:f9:6e:5a:a0:66:da:dd:ca:69:90:23:86:8a:d1:16:b4:1e:
a0:8e:80:98:22:b3:00:b9:d3:ab:94:b8:2c:cd:14:4c:60:d0:
71:46:19:c5:a0:cc:93:fa:91:b1:e3:79:12:b3:a8:06:fe:58:
af:cb:3b:01:71:a1:3b:09:1d:09:87:65:08:d1:29:08:af:9e:
21:28:61:88:73:6f:55:11:fa:cd:76:e0:67:49:61:69:5a:27:
fa:00:4c:6b:f7:79:9e:f3:51:4f:e2:69:8b:44:84:08:1f:ea:
3b:48:07:19:3e:fb:fe:20:d8:f9:c1:bf:02:f8:17:2e:ee:72:
f6:eb:9d:c3:bc:5c:58:0f:9e:90:a8:5d:f5:97:e1:09:c5:44:
f8:17:be:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:40 2025 by rpki-client