Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: bnsmQwZAeodK9gfeN79KcQznFIwKvbbh0OPFlulWGdA=
Subject key identifier: 00:3A:B1:F1:87:6A:98:6A:95:F7:3D:0B:26:13:6D:3F:D7:FA:13:A7
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 0194BBCE2A5DAF9E5FC768FA29CEF4A51678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 02D3
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: x55nqySDaXHt8wKzh9QnC/C+mCbAFuj2ryNqTF0DqCs=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:5d:af:9e:5f:c7:68:fa:29:ce:f4:a5:16:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=003ab1f1876a986a95f73d0b26136d3fd7fa13a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:f4:1f:fd:e7:27:2b:0e:b0:7e:6c:17:9e:
d6:cd:15:aa:ae:3c:8e:88:c4:0a:7f:c4:2c:bd:5c:
11:50:56:b5:ce:3b:71:d7:00:fd:a9:14:9f:d5:f7:
96:b9:1f:c9:23:65:5a:cc:dd:13:49:04:7e:11:a2:
0a:1e:8f:41:9d:16:73:77:85:83:a0:04:b3:17:bc:
89:60:fd:5c:b4:58:96:07:84:c9:96:5f:07:27:e3:
a6:c9:29:82:c7:d6:f5:a2:a3:0d:42:c5:f9:18:8c:
7a:ad:74:b2:fd:2c:44:fa:c3:d8:b2:b0:94:4c:de:
15:87:2d:76:a0:a6:7f:b1:50:4a:f0:5c:14:61:eb:
6b:04:90:10:77:80:7e:8d:2e:11:af:e2:30:ec:85:
46:42:ed:47:09:81:10:d5:a2:6e:87:48:a1:88:a7:
ba:69:38:e3:29:95:e1:a1:95:c4:ea:1b:25:5e:01:
09:45:1a:9e:da:76:3e:98:e4:6d:1b:9b:5a:c9:ac:
b5:3a:c8:d1:76:e2:5a:68:b9:df:59:d2:2f:57:6e:
1a:d8:b9:6e:ea:2e:3b:f3:24:a9:33:8d:6e:3f:81:
47:a4:a8:0f:37:73:dd:cc:7d:db:94:2f:f6:0e:11:
e3:b7:1f:de:6a:b1:5d:36:9a:94:15:a8:27:22:c7:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:B1:F1:87:6A:98:6A:95:F7:3D:0B:26:13:6D:3F:D7:FA:13:A7
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:8b:6a:d3:63:e6:54:e9:40:a1:29:88:e6:8d:a6:4b:2c:
60:1d:23:64:22:57:fc:52:84:c0:13:78:07:fb:ab:7d:50:9f:
30:5e:6e:55:67:b1:33:7e:7b:04:98:49:c0:0a:69:93:5f:09:
55:fd:8f:83:f0:07:4e:e3:59:e1:32:79:1d:55:13:f7:2f:d5:
88:3f:04:cd:55:0d:91:4e:cd:05:00:a4:b8:a6:e1:aa:b9:19:
6d:85:3c:f6:b3:78:34:18:53:0c:ba:86:2a:b0:a2:e0:47:e5:
23:cb:e0:a8:ff:3e:5c:0f:5f:17:6f:32:40:bc:ce:b6:3a:97:
17:a8:28:ca:54:a4:1f:54:de:7c:7a:ce:b7:3d:66:df:41:c2:
61:be:9d:1e:63:69:cc:52:c8:c6:d2:4e:a7:1f:61:5a:23:63:
3d:3e:bb:b3:c6:86:88:60:86:36:26:dd:22:b7:6c:73:fd:2d:
e1:90:c2:e9:1b:19:4c:26:48:14:71:76:7e:d7:7b:df:0f:13:
90:1c:cd:88:44:83:f5:f0:9a:73:8c:c8:ff:78:f7:2e:5a:7c:
c7:55:99:55:b7:61:8e:cf:78:ea:b5:65:0c:35:70:37:c0:9d:
aa:e8:6d:56:74:c5:93:5f:75:ed:82:83:dc:a4:e9:be:92:6b:
3e:4f:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:10 2025 by rpki-client