Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
File: 1-Q5xm6pMgxBINnn7ajy0zprADAk.mft (raw, json)
Hash identifier: V0jnBjyJdhj+WfErSL2YXIYtfwf1MuGVies0wvIDqdI=
Subject key identifier: 45:56:75:BD:1E:73:7A:DE:F1:F5:EB:76:C0:BD:C4:B7:AC:AF:90:6F
Authority key identifier: F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
Certificate issuer: /CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
Certificate serial: 0194BC0508DB0AEEE309E67F40BE0D1494E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 1-Q5xm6pMgxBINnn7ajy0zprADAk.crl (hash: q4GUMFU5i9TDBMZu4SCpB9v8A5QBBtLkdmMBUzjTVCI=)
2: bFcn9mPyZL-HWvCUmkD4imPT9lE.roa (hash: nx+SWfL7k2gx1ajS+PvhXlizAfJ85BOfaRSOtzLsX5U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:db:0a:ee:e3:09:e6:7f:40:be:0d:14:94:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=455675bd1e737adef1f5eb76c0bdc4b7acaf906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:3d:8e:6b:a3:6f:1a:6e:d9:ec:10:6f:f4:
5a:20:6c:75:8d:40:ac:49:c6:f2:c7:9d:c8:23:3f:
d3:16:86:de:21:64:aa:05:2e:a0:d1:63:9d:72:0d:
70:0d:91:38:ff:45:76:81:c9:28:7c:19:db:ff:0b:
bf:0e:57:40:ef:a8:89:5e:66:51:eb:4d:2e:92:3a:
9c:b7:7f:e1:fe:d7:05:5c:6e:0b:72:51:6a:15:d1:
a2:ce:74:32:e8:8d:c3:b5:3c:68:35:7b:42:2f:89:
34:44:71:50:09:68:cd:e8:e3:be:64:49:dd:f6:db:
2c:a0:33:95:76:35:ff:a2:79:75:a0:10:2c:f1:fa:
f2:ba:41:ad:cd:b1:ee:c4:06:5e:32:4d:2d:ee:7e:
2c:c3:58:25:e4:7c:45:9d:66:d2:0c:4c:ee:58:f9:
05:7f:5b:e1:0b:71:91:24:39:a6:3f:33:9b:4b:ca:
ea:cc:97:2d:63:79:85:54:4a:bf:ae:47:bf:08:69:
61:06:78:7d:1f:65:ab:97:83:d0:91:ed:8a:ef:73:
1a:d6:5c:d9:93:51:2c:6a:e6:33:f5:cd:7f:59:4d:
77:7d:fe:62:f9:de:2c:1a:9f:f8:0e:38:da:eb:d6:
e6:11:dc:0e:f4:8f:2e:59:31:ce:6e:e8:90:5e:33:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:75:BD:1E:73:7A:DE:F1:F5:EB:76:C0:BD:C4:B7:AC:AF:90:6F
X509v3 Authority Key Identifier:
keyid:F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0a:95:c6:73:2e:02:36:ce:90:96:c8:a4:6a:01:cd:6f:e4:
53:0a:a2:69:4d:0c:75:68:1a:b7:4d:5d:22:b9:e9:e3:1d:35:
e6:d1:e6:77:56:2a:64:77:99:66:ea:7e:7c:a4:ba:d6:d0:a0:
07:85:17:2e:77:a6:93:23:44:52:d0:fc:72:0c:4b:82:0c:4b:
ba:36:ab:38:02:f9:11:20:8c:0b:a4:6e:5a:c7:f2:59:0f:f0:
9e:c0:d3:0d:f6:38:c2:28:e1:81:ce:ae:69:7b:2f:6c:c9:0e:
3a:0e:54:68:41:14:be:84:93:b3:2b:1d:f7:ad:85:83:74:04:
65:ae:fa:f4:2b:0b:9c:83:ee:4c:64:8c:d2:51:1e:46:a5:60:
86:7a:ae:09:ac:ca:57:35:47:de:7a:76:a4:61:f0:90:ce:64:
a8:b6:5b:f2:25:73:1f:42:27:0f:2d:f5:73:d9:ed:85:cc:b4:
84:a8:70:39:a2:47:b3:e9:71:fe:41:28:bd:3d:a2:d6:ce:08:
f6:6a:78:76:f0:a1:f7:ce:85:b0:ed:94:60:ba:6d:18:dc:77:
53:19:67:01:d0:6f:1b:57:cb:9a:03:ae:7e:7a:b0:c4:c2:f9:
16:b6:70:4a:03:67:a4:b1:1b:02:19:db:da:62:7d:2c:5b:25:
e3:68:a2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:51 2025 by rpki-client