Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: zWLLsX83wzcr4OyN3xPHIQQlY58Pa80vUG0ITKN5PcE=
Subject key identifier: 5B:0B:50:51:7E:B0:A1:1A:09:10:8D:75:B2:79:80:3D:E7:6C:0F:0A
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0194BBCE7A47320E1C78436620914542D239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: O+SmQQ0ricN3XHQ2QD/RyHsO551P4pMWBLkvRF7NOgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:47:32:0e:1c:78:43:66:20:91:45:42:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=5b0b50517eb0a11a09108d75b279803de76c0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:4f:5c:45:bf:80:19:16:09:52:29:5a:6e:
8d:da:e3:d5:e0:bf:d8:8e:68:17:59:d5:ba:a1:3d:
57:0f:0b:26:c6:1c:6b:37:9d:16:37:7c:7a:d4:17:
71:67:10:40:4a:58:9e:74:28:4d:59:94:24:2e:82:
07:9f:eb:e7:d3:59:0f:ea:a7:23:80:8e:01:6a:92:
1a:90:0c:73:49:97:fd:17:ee:ec:68:d2:6e:0c:cc:
c1:ed:6a:0d:eb:b6:65:35:62:57:58:26:a0:7e:66:
0d:72:8c:fd:74:d1:79:e4:0a:70:68:b0:7a:71:28:
e2:64:bd:a6:a2:26:53:ee:e8:8b:c9:8e:29:1a:16:
07:8c:bf:5e:2d:99:8e:b4:77:5a:de:a8:1c:cc:2a:
96:7c:d6:cd:e2:64:00:c0:f2:e5:4b:d1:35:34:8b:
df:2b:9e:42:a9:aa:2b:61:3d:fe:c7:3a:0f:fb:97:
71:6a:ac:05:43:02:35:f4:0f:70:14:29:8b:e2:01:
ef:09:20:19:b5:87:75:c7:aa:08:a9:01:07:45:3b:
17:c3:96:9d:da:00:ff:19:8e:11:ab:54:87:60:62:
d0:c0:37:5b:c7:90:0d:ef:03:11:e8:9b:48:68:bf:
69:86:51:53:79:ae:f2:06:97:e3:de:c9:48:2c:5a:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:50:51:7E:B0:A1:1A:09:10:8D:75:B2:79:80:3D:E7:6C:0F:0A
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:b9:92:f2:d5:ff:6a:9f:e8:20:f3:a6:22:bb:78:33:45:
51:0f:fc:30:a3:f9:ff:b5:19:b8:6e:9a:d4:c7:1a:7f:23:fd:
25:80:68:7b:66:d2:f0:f6:fd:47:d3:87:24:90:8d:6f:11:9e:
3c:6c:41:94:a0:76:17:88:41:a7:d8:65:c3:de:05:27:88:2a:
9f:39:c7:c1:44:5e:d4:2b:f1:b3:1d:da:8b:16:ea:08:4e:b4:
75:a2:90:15:d7:4e:d2:e8:58:bf:ef:05:37:e4:5e:b2:2f:68:
de:cb:c8:3d:8f:58:87:c9:1a:7d:2c:7d:5f:15:2f:30:96:7b:
44:7d:49:09:c2:ef:dd:3a:97:61:82:b7:63:4b:a1:24:4b:52:
45:04:6b:8c:83:ce:48:25:fd:05:3c:55:29:e8:14:be:43:07:
0f:b9:ca:67:27:c9:32:20:d1:60:ab:2b:d3:a9:f8:65:97:a4:
84:5a:d6:a9:2d:70:e1:21:4c:d9:5d:51:07:32:fc:03:f3:a1:
53:dd:0b:bd:f1:c0:8b:73:5a:04:07:12:b5:6d:e5:9a:25:6c:
6c:f8:53:26:10:d0:45:47:95:87:0e:d7:d6:82:6c:6a:d7:e7:
de:d8:90:7b:c3:e6:81:1f:c8:55:7f:85:a7:d7:3b:05:ca:c4:
30:14:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:28 2025 by rpki-client