Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: OgKrYOmv1t3t2bFhAHtpbuJcU+H9sOsp/Ahl2XYWFhk=
Subject key identifier: 0C:88:FE:4F:30:25:DD:6C:D2:70:B1:01:F0:93:09:8B:CD:56:C2:45
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 0194BBCEDA88D6D71B525303AED575FB27FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: stmj9Z6D7/jQbxVRv2j5YIDwMTBj6iODjUs52dzVK48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:88:d6:d7:1b:52:53:03:ae:d5:75:fb:27:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=0c88fe4f3025dd6cd270b101f093098bcd56c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:2d:6a:8b:94:9a:aa:41:dc:0f:eb:d5:f8:
15:ee:2a:47:a1:a1:e0:c8:45:4f:63:86:3c:4a:c7:
04:b1:6d:4f:c5:cf:c1:4d:35:35:09:71:8d:a3:87:
27:92:b6:d3:ab:47:47:73:8c:9f:f2:7d:84:2b:82:
c1:70:b9:80:7b:a1:05:55:1b:d6:cc:b0:61:16:da:
6b:a3:a9:9f:e9:5e:0e:92:64:44:df:7e:5a:18:72:
b8:47:4d:45:93:12:66:96:f8:37:d2:61:a1:ed:0a:
8f:3d:8c:8a:25:f4:e1:50:c0:a1:da:16:aa:fd:7f:
ef:6d:f6:c4:61:48:aa:9f:a6:19:8d:e5:09:28:00:
c5:8e:64:67:40:65:c1:5a:72:1b:ca:ab:56:ca:fa:
09:17:48:c2:88:2e:09:3a:08:6a:af:bf:16:6a:bd:
d1:ad:2c:91:1f:77:5b:7e:26:ab:00:55:36:2f:d0:
0e:a2:24:1f:9a:b1:4b:6a:72:20:99:e5:2d:ff:35:
2c:56:90:36:36:3c:fc:28:d0:17:1b:37:82:1f:b0:
57:fa:8e:c4:a1:61:a4:4d:4c:ef:c4:de:98:72:1b:
8e:53:32:20:98:e0:e0:6f:b2:09:44:b2:72:2a:44:
33:f6:fe:ec:ee:15:aa:34:85:88:0c:98:22:95:ec:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:88:FE:4F:30:25:DD:6C:D2:70:B1:01:F0:93:09:8B:CD:56:C2:45
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:3a:2d:68:c2:ba:78:35:0c:f1:d5:11:f7:a9:1f:9d:46:
9a:e8:77:98:ef:6b:4b:91:d2:61:9d:02:a7:80:ca:c8:8a:07:
67:d2:60:20:2e:64:c9:c0:6a:77:65:5c:82:3b:8c:f5:fb:d4:
8d:2d:d4:01:c5:1d:be:45:5d:44:1e:ec:a1:8d:a6:41:8a:40:
3e:57:7a:3e:96:c2:ce:7d:3f:31:3e:cc:86:e5:36:50:14:c7:
36:24:70:3d:13:a4:d5:24:af:0d:bb:fc:c1:29:0f:f0:00:7f:
2a:da:8a:02:ef:7d:b1:54:41:6f:53:65:06:50:cc:f6:5b:09:
f1:d7:c1:1f:b4:d2:72:47:e5:68:2e:7f:91:bc:19:18:ad:dc:
3f:2e:4b:7e:d0:c3:84:31:e1:de:68:0e:14:15:d4:7d:c1:cf:
87:ff:6d:8d:25:cc:2c:b5:11:49:94:a2:74:a6:42:a6:79:84:
6d:9e:bc:87:cc:ea:6a:11:9b:f0:a2:54:86:bf:4a:8e:a3:26:
27:9d:f7:c9:12:06:21:63:aa:a5:8f:25:ff:4d:5d:6e:3f:c0:
35:d3:8e:63:5e:b0:e7:28:1a:b1:54:85:df:a3:55:78:d0:59:
66:00:4a:9b:65:78:9b:9b:55:7d:93:60:27:45:86:a3:33:54:
26:72:28:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:02 2025 by rpki-client