Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier: 54uTsLMPr60ywICa5irYivINgVn1kdUoCli3DZnXX88=
Subject key identifier: 13:2F:27:DE:9D:89:7D:15:12:27:D5:68:F0:87:66:A4:80:1F:C7:34
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial: 0194BC3C856338AFD49A94C0DC5BA3C7EA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number: 06F5
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 7k7oD7LKN8vmFjmpoHJyZ78ZDsM.roa (hash: 3i6TmeuMJzO7qcqrnXXMfF/eObFiTQ7d5LzNvTE3yPI=)
2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: U7k5hAYpOaG6kgYz8DPesLzjQUoJa3IlLVulRVZDlBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:85:63:38:af:d4:9a:94:c0:dc:5b:a3:c7:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=132f27de9d897d151227d568f08766a4801fc734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:3b:47:0c:77:b6:4a:14:35:11:c9:c3:6d:
7f:da:b8:da:a4:87:71:7e:57:be:df:9f:4b:96:66:
95:b7:1a:c9:5c:2a:fc:f4:06:fb:d4:2e:b8:6b:f2:
29:86:47:1f:0a:11:c8:82:3d:37:5c:ac:41:6b:41:
c5:5b:71:36:49:ed:c4:dd:47:b6:89:7d:b4:39:ab:
2e:a1:4d:bd:ed:e5:89:ba:6f:db:1e:f0:e3:62:16:
ca:db:51:cb:c4:08:3d:b7:e6:0a:57:9b:f3:c4:a5:
27:a1:d9:7c:f2:d2:49:21:72:2c:04:2d:48:41:96:
ea:14:e8:f1:4a:ac:07:1f:b1:e2:e2:dc:0f:a3:a1:
d3:cc:e9:3e:04:59:5d:ac:bf:f7:53:28:ef:aa:3c:
68:93:60:10:97:a2:62:8e:f7:62:ce:33:cd:d2:cf:
9e:35:d7:3f:0d:63:7b:ef:71:53:ca:c1:1b:f3:74:
92:53:e9:7c:fb:39:71:67:3f:67:10:fd:a9:a5:aa:
44:b9:b3:3d:0b:4f:cb:67:7a:42:a0:dc:84:aa:bb:
da:80:4d:b6:75:bb:38:81:d0:42:d4:da:6c:ee:97:
4f:b9:de:71:40:94:70:f1:bc:df:7a:2e:86:06:07:
d7:4d:98:9b:47:8e:51:15:65:bf:cc:a4:58:fe:61:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:27:DE:9D:89:7D:15:12:27:D5:68:F0:87:66:A4:80:1F:C7:34
X509v3 Authority Key Identifier:
keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:fe:d0:a9:29:24:81:06:89:b9:27:c7:8f:b2:8d:35:d5:
18:c1:54:b0:0b:aa:3e:1a:db:f4:ac:4d:47:8e:1b:95:20:93:
e6:09:54:bb:68:f3:f2:ff:2c:3a:fa:18:19:32:be:1e:ae:75:
03:ff:4e:23:5e:0a:c8:64:8a:a9:5d:9d:28:63:fd:b9:5e:71:
06:4a:ed:11:f4:5d:f1:5a:b9:f8:b0:16:63:ce:f2:49:f1:47:
66:fa:2f:cf:49:61:c4:8f:cc:ee:b7:ee:01:56:38:37:6a:1f:
ce:b7:c9:47:1c:4d:cf:0d:0e:5e:ea:b7:c4:93:f4:f7:cf:ab:
80:1d:2f:c2:09:fc:13:9e:12:18:bf:7b:cb:58:0c:bf:fe:9b:
0c:e0:57:43:97:0a:09:12:a1:16:34:94:b5:db:05:c1:ae:6d:
8f:df:f4:a7:ab:08:b5:e1:cf:ec:b9:42:2a:07:9d:89:dd:02:
9e:2f:63:c0:18:06:ab:41:1e:1e:8d:f5:ce:0b:84:cf:e9:bb:
11:f7:65:a8:71:ae:be:57:9a:7c:af:65:f5:42:53:66:f8:dd:
5d:5c:d3:e8:6a:6b:2b:1d:c0:a4:0d:02:d7:6f:c2:a7:ef:a5:
bd:47:87:f2:36:73:a1:f3:41:93:0c:58:66:70:15:20:50:9b:
20:7b:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:14 2025 by rpki-client