Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: yiYv7CVRazOZsfIb7IpOEgQswF0lHyJBvyCddxJdjg4=
Subject key identifier: BE:A5:61:DD:E6:21:6A:23:24:F1:C6:AC:88:0A:9D:EF:A2:DD:0B:24
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 0194BCE0B1C284BE806AD7BEDEF52623B8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: 4fI2JS1/DqGsmzmlPq0MfEUsinAT2smpSKOq82O8T5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:c2:84:be:80:6a:d7:be:de:f5:26:23:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=bea561dde6216a2324f1c6ac880a9defa2dd0b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:1d:8b:b9:d3:1a:d3:28:88:75:de:27:ad:
11:0b:f0:d5:cf:08:3d:25:1c:fa:7a:06:75:8a:eb:
1e:26:b3:f6:a3:d8:ec:5f:64:0e:1e:bf:f7:03:5e:
50:e0:9f:48:3c:77:cb:0d:9e:4e:be:a8:5a:b8:ee:
1f:dd:b3:9d:33:3e:68:a0:16:5b:b2:c8:79:fd:c3:
00:76:aa:ad:e1:fa:58:8b:79:40:7b:15:89:59:e3:
05:b1:68:a0:f3:ab:b9:32:d0:7a:d6:fb:3f:5d:38:
48:ce:55:40:da:26:b2:e9:c3:5a:ba:fa:80:56:02:
5e:0f:4f:03:33:d5:f7:50:54:27:8b:42:de:9d:d9:
33:6b:a5:53:e5:42:44:ea:bd:a5:f1:8c:28:4a:98:
a2:30:5d:96:63:20:21:fc:32:5e:fe:56:46:a3:c8:
33:c7:2b:d2:99:14:ce:27:7e:2e:a5:25:15:2c:e4:
9b:67:5e:ad:91:ce:b7:7f:0a:b4:0e:5c:c9:60:37:
5b:a0:fd:76:ee:e1:37:86:76:ff:1c:86:bc:b9:b4:
f0:9d:c9:37:39:81:52:f8:4d:21:a8:e5:80:96:92:
ac:ca:ce:e1:3d:a9:97:25:80:a8:9e:16:4b:68:b0:
52:3b:f2:aa:60:25:de:a3:d6:4d:75:53:4a:1f:ba:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:61:DD:E6:21:6A:23:24:F1:C6:AC:88:0A:9D:EF:A2:DD:0B:24
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:37:10:5d:14:39:8d:77:f3:94:74:dd:a9:f1:85:56:96:09:
56:0e:00:4c:fc:a6:84:c8:fd:94:4f:8a:95:ee:1f:96:b6:71:
49:76:82:32:16:f0:3a:2d:d9:fc:8e:d8:1b:da:61:ca:15:e8:
f8:46:20:35:fa:6f:7e:d0:a2:2b:d7:25:32:88:20:4f:f9:47:
ac:cb:0e:8c:02:9e:78:55:aa:02:99:09:02:33:d5:da:41:69:
4d:55:8b:d5:4e:e3:da:b1:3c:9a:34:ae:50:71:d0:e9:26:14:
37:6f:1d:c2:63:f6:05:65:52:3c:5c:95:b9:ae:ea:51:c9:bd:
55:2b:c6:69:88:43:a1:90:fc:18:8a:c8:f1:41:ce:00:90:f8:
32:16:6c:bd:7f:de:fe:e6:dd:96:08:1c:5c:04:05:71:ab:39:
dc:69:9e:db:ce:00:ed:65:c0:0e:2f:5e:fe:af:e5:8f:a3:9e:
5c:e5:e3:6e:7f:e7:96:a3:f4:3d:4b:4d:af:dd:b5:1e:ba:38:
e5:97:23:3c:c3:f7:31:fa:74:bc:ba:47:fa:11:ab:a6:86:68:
e8:75:12:ee:b8:d3:3c:67:d7:ad:aa:74:33:39:79:db:94:21:
3f:25:e0:bf:f2:e8:85:24:ae:7c:0c:c7:24:4e:fc:ff:57:63:
e6:f2:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:50 2025 by rpki-client