Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: 0CEH/rtElMs4xG32hLvsQrTr1oGZdtiOOfuchSEvWJk=
Subject key identifier: 52:FD:11:B0:2B:94:45:27:EE:C8:7B:6D:48:F4:00:84:BD:A6:2A:01
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 0194BCA9F257FD6F8C03F79C72F4B34108EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: y9hEaPIl8UuyPQIU8vnMycHHqkvwPtD82zcx5syV70I=)
2: w4EgtXymNG4qdDGffeejqhzCwgQ.roa (hash: VmcnuEKWSTHxVX4tEucguGz0L6uvVm7W7xv8HWe4KjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f2:57:fd:6f:8c:03:f7:9c:72:f4:b3:41:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=52fd11b02b944527eec87b6d48f40084bda62a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:18:84:a6:25:b0:21:14:cf:eb:3b:10:e0:
12:12:ed:49:68:61:85:0c:03:c8:38:0d:8e:0d:c9:
32:6f:2b:ba:f3:a0:29:97:b3:52:7d:fa:f8:ee:83:
f2:18:4e:8b:6d:2b:28:4e:b3:db:f7:82:a3:cf:df:
b4:c3:05:ca:5a:e2:ee:d2:17:98:83:8a:01:47:b2:
f2:4f:ee:36:3d:1b:18:41:c8:97:68:bd:b5:5c:49:
4d:8c:a0:40:a2:48:58:e3:a5:13:ba:ed:e0:67:d8:
86:a8:c1:ac:c3:47:ec:22:16:51:b7:37:0a:62:36:
74:a3:2d:a9:6a:20:75:b2:ba:f0:4b:c6:2c:c7:65:
e6:ff:d7:d1:c6:b0:55:ef:3b:01:ae:23:5c:07:82:
bf:0d:82:d8:75:1b:91:86:29:bc:6e:9b:f3:e8:3f:
b5:66:6e:43:6c:70:cf:87:a7:16:e4:d5:73:02:59:
aa:88:9f:b0:f5:bc:86:c6:a3:a7:8f:7e:0d:4a:b7:
5d:cc:a7:e1:34:e6:0c:e4:05:33:45:61:0e:94:37:
01:7e:4f:ad:24:c9:20:b6:02:ae:fc:d9:38:2f:d9:
5d:ae:d2:29:d6:87:dc:24:3d:6a:2b:b1:17:21:20:
c1:aa:8b:be:38:89:d3:83:55:a8:ee:f8:c1:de:b5:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:11:B0:2B:94:45:27:EE:C8:7B:6D:48:F4:00:84:BD:A6:2A:01
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:96:fa:07:3a:6c:1d:28:49:fb:c7:8d:6d:64:5c:94:6a:66:
48:f4:d6:b2:76:e1:d6:d3:a7:2c:cb:61:30:25:91:5d:ff:e1:
1b:69:6d:ff:2d:08:bb:1e:01:eb:6d:d5:62:8e:db:db:b4:0c:
8e:15:c6:aa:ca:50:1a:a7:85:79:80:7c:f2:77:55:88:5d:6f:
52:f0:4b:5f:d6:c6:91:8b:00:01:f9:0b:22:e9:32:ea:da:43:
30:7d:d1:d5:ae:22:1e:5f:d7:5c:ea:9f:8b:95:3c:2f:97:76:
38:e4:b9:29:10:5b:5c:e0:00:11:4d:69:2b:23:d3:c7:b1:68:
41:b5:73:ef:4c:a5:07:9e:ac:75:4e:9d:1a:e6:07:a1:cb:ac:
fc:61:a8:46:72:c6:20:8b:16:3c:91:dc:18:44:cf:0c:a2:73:
1a:5f:af:69:e7:8e:6e:aa:76:56:af:92:3a:76:9d:01:90:86:
56:e8:c6:e0:be:67:49:bc:5d:7f:7e:2c:df:77:bc:b3:ca:d1:
ad:ef:05:09:84:c9:21:86:a6:8f:3f:aa:70:86:9d:95:24:d1:
0b:26:58:38:cb:67:d6:42:9b:c8:56:e8:92:79:7d:d0:63:ea:
c9:52:90:cc:29:98:c2:69:b1:bc:c7:f1:fd:92:58:ce:a7:f3:
14:df:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:52 2025 by rpki-client