Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: JwXkmlGCH7MFnEdAgzhWGNzcrlHY2N1Tq9DvKHJWd8c=
Subject key identifier: BF:A3:18:06:49:56:32:16:2E:63:E2:92:20:4F:39:B4:05:51:99:69
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 0194BBCDD652FBC7890D51DF0170807E711D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0C4B
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: T+JpdLBdXjibHm/5T/95s4+oxCnkzuS3Lrhcn+Sfza8=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:52:fb:c7:89:0d:51:df:01:70:80:7e:71:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=bfa31806495632162e63e292204f39b405519969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:62:74:be:44:b8:36:4b:f5:d8:08:dd:0e:
bc:07:be:7a:4f:e9:3f:b1:98:ed:2e:f0:2a:fe:2c:
6c:a3:fc:65:7c:1b:9a:5b:77:37:6b:e7:d6:00:d3:
56:da:64:7d:57:e9:26:47:ec:a8:76:f0:11:73:e3:
96:a1:42:e2:85:b4:32:96:82:01:4b:c1:07:c6:5a:
71:97:42:0b:5b:70:75:45:bf:c7:bb:e2:67:15:83:
69:2a:c0:e8:e1:e1:d0:7e:eb:89:61:c0:21:49:d9:
2e:c1:e6:45:0f:9b:a5:de:77:8c:cc:ae:ae:ab:24:
85:20:86:37:3e:80:4c:54:ce:74:b4:75:97:25:b2:
bd:15:38:c4:46:36:a7:52:93:9b:fe:c5:16:73:17:
53:96:83:2d:df:79:8f:fc:a8:af:70:92:37:58:b1:
4d:5a:07:dc:72:2c:85:fe:24:ea:04:18:ab:89:f1:
8a:79:c1:eb:6b:e2:1a:2a:b1:75:de:3a:79:51:6a:
68:f0:8c:de:5d:0d:cd:16:19:b2:81:f2:58:cc:90:
b6:b9:cc:1c:4c:6d:b1:be:b3:3b:07:74:50:0a:4a:
d2:0c:de:d5:57:07:9f:2c:cf:c6:ea:8d:af:f1:b9:
ce:4f:a4:81:08:0b:c7:89:0d:b8:c7:09:e2:1a:7f:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:18:06:49:56:32:16:2E:63:E2:92:20:4F:39:B4:05:51:99:69
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b7:50:19:3d:4b:ac:32:ae:dd:4d:2c:b4:3a:6e:2e:c5:85:
1e:8a:0f:14:93:db:94:81:a6:6e:04:33:95:be:33:84:e2:b2:
cb:6d:16:82:08:02:16:1d:00:21:5f:32:23:23:c8:ed:5d:a5:
f5:27:b3:6b:6b:a8:0d:ca:dc:8f:a0:e1:91:d2:b0:82:b4:7b:
c7:a2:09:24:32:ce:fe:e1:c3:dc:1e:10:8b:57:e3:94:26:53:
6e:11:e2:b3:47:69:b2:9f:3d:3b:af:f2:56:2a:ec:e9:d0:26:
6b:c3:d4:dc:1c:f9:02:c8:71:b5:f5:b2:da:c0:4d:fe:df:72:
6d:30:10:0b:b1:46:85:60:ec:8f:29:5c:9f:17:a9:f6:71:e2:
cf:3a:3a:d1:f7:c6:e8:ba:fb:1e:64:94:d8:68:f1:66:50:6d:
14:dc:01:33:64:3f:5b:c5:59:c9:4f:8d:78:d5:e7:b8:56:6a:
8e:6e:21:ee:6b:bd:aa:2b:88:4d:07:34:c4:31:31:81:4a:59:
cf:26:59:75:07:a9:25:3a:e8:6e:8f:20:23:17:36:5f:de:79:
71:29:58:5d:37:1a:ee:ec:0b:27:aa:31:5e:84:8f:70:c3:81:
f2:a9:57:d9:5d:23:d6:3c:48:b1:13:88:1e:11:68:a0:51:1a:
50:60:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:26 2025 by rpki-client