Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: SiPP/Y6bDD+okLIodpO3Ox0GWmapTaE/2ZmG0bWFe7o=
Subject key identifier: A9:FE:9A:96:05:E5:65:F0:81:E2:03:D6:65:77:89:13:C7:88:C9:04
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 0194BBCDB66EA6563FC465DCA1FE543A5D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: ouR7cIpXCq7XeSkfi60gLU9HlXNXPNx9bqD5YEx3tDU=)
2: tcbbFJDqhBbRkJh6NDYN55iLfDE.roa (hash: vKEQ9e0Db9WBNbap5GYKx4PxGXK/ovDmh/isyYRiZ1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:6e:a6:56:3f:c4:65:dc:a1:fe:54:3a:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=a9fe9a9605e565f081e203d665778913c788c904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:4c:1d:26:be:2f:40:55:08:30:71:f4:c1:
6b:6d:a4:bb:da:89:11:5c:54:2e:20:3d:be:7d:24:
78:8f:0f:18:25:11:bf:bb:00:b0:9c:59:14:33:a4:
f0:bb:94:e1:fa:82:5e:8a:ef:f2:16:0c:f6:89:83:
ee:35:8a:fa:a0:de:ad:bc:3a:df:cf:4b:41:a7:f7:
00:ad:fb:e9:d9:fd:60:63:19:9f:9e:72:bc:e8:f0:
55:80:d8:16:b1:74:e2:bb:4f:9a:e2:ef:38:3a:69:
14:63:21:cb:38:e6:0a:74:ae:15:46:8d:e5:6c:bb:
68:6f:69:f8:22:3a:e3:52:b3:99:42:e4:cc:2c:ea:
b2:92:32:8a:51:90:ce:7e:10:00:06:86:67:ac:11:
ca:f7:3f:f7:71:0f:79:22:75:61:ec:59:d2:14:00:
12:df:d3:bd:7e:cf:2a:3e:5a:2c:5d:b0:f8:4c:5c:
39:15:5e:15:44:da:0b:c1:58:10:e4:c1:55:ff:a6:
28:09:cb:ad:a6:b3:48:e3:fd:5c:b8:70:7c:d4:27:
c0:1a:e3:96:38:67:e9:86:ea:09:97:98:9c:68:be:
82:37:74:19:c9:bb:c8:07:6c:3e:ca:64:f8:51:0b:
69:e4:5a:30:db:7a:be:85:ed:d9:5e:2c:81:1b:63:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:9A:96:05:E5:65:F0:81:E2:03:D6:65:77:89:13:C7:88:C9:04
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cd:59:41:93:2d:93:69:e2:90:a8:01:59:61:c8:a6:0b:11:
35:ad:b2:57:ee:70:1f:a0:9f:13:e1:b5:ab:9f:d9:e0:42:c8:
4f:f9:48:78:31:61:a5:fb:23:4b:2e:d5:7a:96:b5:f5:d4:36:
ed:12:5d:7a:7a:23:80:f6:25:20:5e:60:ce:78:0c:8f:c7:d8:
fc:4f:6a:e7:06:85:4c:cd:e1:65:ad:da:dc:fd:4e:32:d4:6d:
b2:af:8b:13:5f:97:a0:d5:6a:b6:a0:9d:97:da:7e:54:92:5a:
54:c4:29:d4:d1:d4:69:90:4c:89:1f:0a:55:88:2b:0e:85:8e:
25:8a:85:8f:64:fe:a6:d7:87:d5:e3:c0:3d:ea:58:3a:6e:f3:
15:ae:63:8b:f4:ea:ca:da:61:44:f4:0a:d1:ca:15:0b:b8:ca:
30:0c:df:0e:a3:ec:aa:64:91:75:ba:6f:04:a7:e8:a1:b0:55:
ca:5f:30:c7:28:9f:75:75:b1:40:2f:e7:b4:72:cd:ed:ce:b6:
81:49:fb:45:67:dc:59:e7:2d:d3:b2:f6:85:8d:eb:53:77:19:
a5:5b:c0:8b:21:17:5a:b2:05:c4:34:f4:fd:6c:c4:cb:97:79:
a9:b6:02:e2:a5:2d:91:eb:4b:7a:ab:db:0e:43:e3:3c:e3:66:
24:27:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:25 2025 by rpki-client