Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: XXVVuPPFJG9iudCGULfzrTlFQ/IDJAPEIxWXiirEoJI=
Subject key identifier: 58:4B:7F:3D:89:E1:74:B5:6D:86:8D:84:A6:4D:B3:A0:4F:C1:3D:A4
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 0194BD1788FCA4C4C1A5ED8331DBF0C1845A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0D53
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: Le2xpOt7JofStnPS8G4T2OjBxQVaizf7rTbKG9fQcMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:88:fc:a4:c4:c1:a5:ed:83:31:db:f0:c1:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=584b7f3d89e174b56d868d84a64db3a04fc13da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:37:8d:65:fa:db:4b:52:d0:f3:e2:d2:c0:
fe:d1:92:95:31:f2:05:2e:27:5d:f6:a1:ef:63:a2:
be:82:dd:00:a8:f7:78:2c:a1:28:f1:c5:10:ca:a3:
06:2b:3b:d6:88:cd:bd:2b:ed:a7:43:f8:20:95:8a:
84:78:ad:e1:db:b6:e8:64:b0:21:21:16:cf:b3:67:
c2:e2:94:0c:24:48:cf:1c:81:6d:5c:58:ce:bf:3b:
c6:a2:25:c3:ed:b3:6e:e7:6a:82:9c:71:42:05:45:
1b:8b:07:22:53:42:81:8e:cc:8c:3b:5d:d4:dd:5a:
ab:a4:a9:b9:49:87:a0:f3:7c:b6:92:e7:07:2f:8c:
69:f8:45:cf:37:a1:6e:52:04:bd:d6:d9:f4:6d:d4:
fe:23:1e:3c:a3:24:80:06:c0:24:b0:e7:ff:0f:4e:
d5:b7:6e:64:79:10:00:65:ca:71:f6:d8:8b:65:85:
58:5f:a0:ad:d2:3c:f2:5f:40:a1:31:a4:83:53:37:
15:99:7c:ca:88:5e:6e:e0:0e:b8:5e:e8:ec:32:cb:
3a:80:e1:62:4e:d0:5b:1d:b4:61:52:81:34:23:c1:
a1:ff:e0:7d:5c:1e:93:74:9e:85:5b:4d:5e:16:db:
4d:26:11:f6:10:08:b0:24:ae:09:30:cd:db:86:8c:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:7F:3D:89:E1:74:B5:6D:86:8D:84:A6:4D:B3:A0:4F:C1:3D:A4
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:95:aa:6e:37:d0:52:65:91:26:d5:83:7c:e1:e7:9c:28:41:
af:85:41:e4:e0:53:c6:1c:b1:7b:7a:fc:79:a0:34:97:ae:c3:
85:ea:07:b1:b9:71:00:26:f7:4c:61:7c:71:66:06:e6:a7:09:
33:2d:92:ea:80:f4:23:c0:3f:bc:3a:44:90:8c:6a:39:81:b9:
e9:54:05:37:22:0a:0f:fc:26:7c:aa:46:14:f6:ae:97:24:5f:
63:a5:8b:80:d6:cc:f0:5c:45:4d:13:71:1f:25:56:8d:6f:9d:
64:8d:07:ce:c2:2a:1b:46:49:f9:40:8e:a2:a4:5a:9b:bb:b9:
78:31:9d:92:78:55:79:0f:3d:23:c2:e2:9f:a0:cb:78:cc:71:
70:b9:85:dc:80:8b:93:05:8d:c0:72:71:57:30:c2:ef:a4:39:
0f:ec:c5:fc:ce:1f:95:33:c7:83:de:8a:d0:61:b8:db:2c:fb:
b9:39:8d:d4:0e:c3:ce:f1:fd:5a:81:43:25:91:ad:49:6e:7d:
29:07:7c:6a:cd:fa:11:74:72:a4:7b:81:62:cf:6e:c4:7e:da:
f5:9b:75:1d:94:9b:16:9b:76:4e:06:82:cd:45:cf:5b:53:94:
a2:4d:50:6f:b1:f3:ab:12:e6:75:b2:2a:88:c4:b5:46:30:19:
21:74:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:51:56 2025 by rpki-client