Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: uMUSASw4F0crPTV4pvpsOldEzUv4sOUEIge8gmc4Lac=
Subject key identifier: 2A:5C:C7:AD:CE:C9:8A:F7:5C:A3:74:FE:02:A9:03:A1:19:8B:93:12
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0194BD857A364F186D7275ABBDFE9FDAAB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ODJpSadwpJYmUwT1xT5EKtbqwEsSgHueTkUzTNlQmjk=)
2: xp6MNRTZ7ifDhsOs42_iuvQQ0p0.roa (hash: YfTq4WUGhOngnSjNPmT2KUv9TWH0pWquUAJ4huZy0Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:36:4f:18:6d:72:75:ab:bd:fe:9f:da:ab:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=2a5cc7adcec98af75ca374fe02a903a1198b9312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:b9:6b:fb:fd:15:2b:f1:9c:34:09:b6:60:
05:d4:86:11:c9:f4:d5:0b:0f:e0:ac:ff:ae:2a:2d:
cf:33:de:4a:74:c9:69:dd:f1:8f:37:61:ce:54:bf:
d5:f7:a9:20:80:24:0a:ac:d1:35:14:3f:74:7f:a0:
4c:c4:ca:16:d1:e0:53:c6:63:30:54:d2:2f:f6:e5:
39:cf:93:32:5d:c6:b2:0c:46:1f:6f:7b:0d:23:9a:
7f:00:46:88:2b:43:a1:a7:09:75:c1:d8:04:bd:bd:
59:2e:dc:b4:2d:54:4a:3b:9c:e2:c2:9d:eb:5d:3c:
14:78:61:5d:18:c1:3e:19:27:46:63:50:22:08:8e:
12:ee:c1:4e:66:7c:4e:25:e8:18:51:1a:85:f5:d5:
7f:93:60:55:55:67:d4:09:7e:9a:95:ca:77:82:cd:
b3:50:09:69:91:94:b3:ae:4a:77:47:e3:cd:d1:31:
2f:aa:9a:5f:63:8d:e5:21:6b:90:ff:3c:af:50:43:
ba:01:ce:e1:72:3b:9f:8f:13:66:b7:52:63:a1:9c:
1a:95:cd:ba:14:ed:e6:e1:36:1d:7d:25:83:06:19:
44:d0:b8:70:dd:46:27:84:2a:6c:f8:ac:81:e8:27:
3f:0d:a4:45:48:96:09:5e:d5:1a:df:f4:d0:d8:9a:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:C7:AD:CE:C9:8A:F7:5C:A3:74:FE:02:A9:03:A1:19:8B:93:12
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:63:92:15:6b:42:16:b3:62:3b:1a:98:fe:2e:22:10:db:
d5:bf:f0:4a:6f:9e:b9:66:55:6f:f8:24:de:5d:a4:ab:fc:94:
e5:7b:5a:35:21:4c:2c:b8:b5:e3:55:81:85:b8:f8:ff:8b:ee:
80:6f:ce:3e:94:82:5d:68:b5:4c:ae:b3:d4:6c:dd:78:75:8d:
c7:7d:1b:2d:0e:d6:e9:17:49:f8:2c:49:ae:07:23:11:f2:d4:
51:f4:48:5b:06:60:f6:bf:7e:6f:d6:bb:85:a3:ce:3d:33:6f:
16:6f:08:92:42:d1:e1:86:48:84:db:65:15:56:33:11:e9:2f:
42:aa:18:78:cb:dc:10:3d:88:a8:6e:ea:11:9e:d3:c6:66:58:
66:6f:6f:8a:90:82:55:ca:99:3c:95:b4:06:fd:c1:30:d5:96:
ce:de:ea:a6:3f:e6:36:30:d9:25:91:d6:33:1a:80:05:b3:e4:
7b:f4:00:f8:8f:05:48:34:40:2e:72:55:31:62:ae:ef:d6:f4:
ab:38:84:07:c5:17:7f:a6:05:4b:55:7d:84:ed:74:62:79:4d:
74:ac:65:cf:40:42:62:d2:3f:c8:d4:8e:4e:71:db:fc:15:25:
1c:4d:3a:b3:5b:c2:6c:fe:b2:fc:19:b6:1c:e4:b7:12:1c:88:
b0:f4:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:52 2025 by rpki-client