Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json)
Hash identifier: 8ZHgYF8dIz/uCGaugGZZRRf/zYDmjsWWc77ASEWOEUQ=
Subject key identifier: 35:DF:71:A5:F0:AD:09:AD:28:2E:44:96:49:7A:57:78:60:9C:60:80
Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Certificate serial: 0194BD855561277F2189B329B3B0ABC504A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: emNJKyZ0JYaqh8F8k42xgV4aHYSi4Ah1JVMnQHPDLRE=)
2: tBcUVtef6rZ0kSSzgGFNQ0aGmXk.roa (hash: axGcXX34atfoTeccVW4HcK4Aoj164U97BqMvxhWQBsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:61:27:7f:21:89:b3:29:b3:b0:ab:c5:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=35df71a5f0ad09ad282e4496497a5778609c6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:c2:ea:b3:d7:94:90:39:0b:cc:ca:9e:6d:
c6:00:c8:af:c8:55:9e:5f:92:44:88:6f:27:0a:fa:
0e:ed:11:95:2f:d0:99:9a:33:69:90:5b:76:36:f5:
c1:a9:f0:15:a5:ef:b9:27:10:e0:62:6b:0a:b4:d8:
03:47:d9:6f:fd:aa:d0:7c:f9:dd:46:c0:2a:e6:d7:
1b:42:be:e4:c4:6f:4b:b2:23:56:98:5f:94:bb:56:
50:9d:71:22:bd:e9:75:7b:c4:94:5e:cc:8c:7f:64:
62:7d:44:ee:dc:43:70:e3:e2:50:72:19:ac:4e:d0:
be:22:a4:54:a4:7a:71:e7:ab:f2:2f:a0:12:23:ef:
56:8f:ac:3d:83:b0:c0:23:56:c8:ac:10:e5:55:12:
4f:17:1a:a7:6c:0c:5b:2f:ab:2f:ab:71:cd:54:bf:
cb:c3:e4:32:91:3f:a2:35:51:f3:70:64:9c:ef:38:
b7:90:7d:d8:22:f8:c9:b1:d6:2a:86:18:36:5e:cc:
57:26:73:e5:aa:a8:b0:95:78:71:c6:83:bd:25:8c:
7f:fe:53:27:c4:3a:99:9a:cd:0e:3d:b5:2c:ae:7a:
1b:b5:0f:45:58:66:cf:7d:de:bc:35:e1:62:fb:aa:
75:e9:36:5b:70:4d:cc:0d:1e:44:79:eb:8b:39:43:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:71:A5:F0:AD:09:AD:28:2E:44:96:49:7A:57:78:60:9C:60:80
X509v3 Authority Key Identifier:
keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4b:4f:fb:96:8e:d6:c7:30:66:b4:62:52:58:4d:be:5f:b6:
62:4a:1c:2f:c9:c8:a5:ce:e3:1b:5d:c5:e9:47:cd:91:6c:39:
53:61:42:80:1b:57:e4:77:66:62:02:ea:af:a6:a3:60:5a:a9:
e4:f8:5b:c0:d9:aa:eb:74:5d:f9:03:a9:36:0a:16:44:32:41:
da:50:1b:0a:e8:13:13:68:8b:37:e8:b8:c8:35:f3:1a:aa:0d:
1e:90:8d:8a:68:9d:c0:9e:0d:0a:bc:94:cf:f5:d3:0e:8d:6e:
2a:9f:08:24:76:b0:d3:eb:71:2b:73:8a:cd:85:c2:77:a5:6d:
de:53:50:42:da:5b:0d:37:d5:7e:c5:73:32:ec:f7:f0:cb:05:
65:4f:d5:74:61:09:f1:55:63:90:a6:a3:bc:5f:16:e2:cc:e8:
36:37:9d:00:94:27:ae:f7:86:39:cd:01:3f:61:c4:cf:3d:ce:
41:41:92:c3:55:89:33:b2:8f:bc:55:9a:09:4e:0a:aa:00:36:
a5:dc:71:60:e8:ef:5c:6d:ad:ea:73:57:5c:99:23:c6:b5:e9:
2e:30:dc:32:1a:05:32:b4:e4:1e:b5:27:00:5d:99:b3:c7:0d:
fa:3d:06:57:c6:13:12:cd:cc:88:0f:10:74:c5:11:d2:80:03:
81:20:79:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:43 2025 by rpki-client