Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: 28bv8sy84EgB7jMFfs7Wn8vhiH9RGfx4J/3vlYuujA8=
Subject key identifier: CB:EC:AD:25:11:80:00:32:1D:E5:DC:25:F9:D0:0C:3C:91:5C:06:F0
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 0194BBCE1BA9817A19DE4B3A6F3C4132D712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: oKcx2jOJY8OHbCTLh8IpJWCaHOHj9PwKB+FMe2gAlOQ=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1b:a9:81:7a:19:de:4b:3a:6f:3c:41:32:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=cbecad25118000321de5dc25f9d00c3c915c06f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:ff:b8:eb:df:bc:f1:30:3b:ed:12:4d:9c:
eb:b5:7a:d4:38:55:1e:c8:5c:cd:9a:64:ca:8a:a1:
50:c5:ff:f6:21:87:05:ec:8b:de:34:64:e9:3d:c6:
76:53:41:78:7c:30:de:e3:75:41:09:58:c6:ef:58:
5c:b3:9d:cc:53:8e:8f:a5:c6:3d:67:2e:33:a4:aa:
61:c3:72:c0:47:c1:6a:d8:ca:1a:db:50:72:47:8d:
f6:21:4f:92:fa:4b:98:f4:b6:13:a4:0c:61:ed:45:
90:76:1e:e9:95:e2:e5:c0:a7:a6:01:62:f9:3e:52:
ed:4c:50:23:6e:4f:ac:39:01:c1:4f:58:5b:43:e6:
de:8d:89:3b:69:8d:51:5f:45:2a:d3:3d:d7:bc:ee:
9e:43:63:80:28:22:d9:12:92:d7:c5:9a:e6:a1:ff:
8e:45:42:28:05:e7:a5:09:7c:a6:e9:27:fa:69:1a:
96:e7:10:07:47:2b:be:53:35:e0:3a:a4:b1:df:b3:
16:46:3e:84:7e:22:38:0d:8e:39:82:6b:71:3e:13:
22:00:8d:40:e1:0a:af:1b:83:d0:8c:17:36:0b:e8:
4c:a9:40:8f:1b:ae:fa:a9:1f:4f:e8:fb:83:fe:81:
df:26:df:b6:16:6f:a1:ac:b4:34:92:92:3e:17:b0:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:AD:25:11:80:00:32:1D:E5:DC:25:F9:D0:0C:3C:91:5C:06:F0
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9d:e3:f7:ad:68:de:26:a0:47:7d:2c:db:85:89:b9:ca:ac:
3e:e1:6c:e4:2f:1b:8e:f9:8b:21:9a:18:54:8f:7b:9f:16:bb:
5d:62:5a:25:08:d0:d0:3d:d0:92:95:41:72:6c:7b:62:8c:ab:
d6:84:da:04:d1:99:c3:50:9e:8e:59:d0:15:23:b8:76:02:cf:
c3:b9:38:90:6b:9c:bc:89:3f:10:3d:48:51:d7:b3:44:ab:17:
df:39:fc:d0:8c:af:a3:9e:68:39:2c:e3:1e:00:c9:13:1c:4a:
0e:c7:6f:58:30:d8:7b:a3:36:fb:0e:cd:7a:4d:92:be:e5:47:
e6:53:7b:b9:1b:e6:2d:d9:15:30:11:00:28:6f:b8:dd:aa:84:
e2:c0:61:33:d9:19:9e:b6:f6:10:06:2a:eb:da:5a:4c:3f:ac:
ac:bf:4a:2b:3f:4f:f5:60:b4:be:c2:48:22:2b:84:ff:2c:a9:
77:fe:ac:6f:b8:c2:1c:bd:5f:c7:f5:62:2a:e1:0a:f5:41:a2:
98:f4:8c:93:53:d7:10:93:de:ff:1b:a4:4f:7b:a9:d8:86:93:
f8:04:23:f2:43:8c:c8:4b:33:31:4d:0a:78:7f:e0:5a:d1:f9:
b6:07:a1:fc:96:c5:b8:2a:61:8d:a1:b9:d5:a7:05:20:a7:38:
a1:38:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:57 2025 by rpki-client