Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: wT+A1+Le0XRuA2KGWlE1FFh24j02YMQlI5xmRYOEp5Y=
Subject key identifier: FE:5A:39:EC:B9:75:FD:75:A6:31:AD:FB:9C:D7:AA:58:0E:AA:98:69
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 0194BCE09C97B930519913E46F097C1EB841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 13CE
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: Ya9cYQWZ86eV4HgNZ17IgcUrU85WITXbEzyfqSjWol8=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:97:b9:30:51:99:13:e4:6f:09:7c:1e:b8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=fe5a39ecb975fd75a631adfb9cd7aa580eaa9869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:93:71:f9:fe:a3:46:2c:2a:1d:41:cf:cb:
bc:7f:c9:92:ed:67:49:ac:46:53:1d:0a:e0:a3:42:
d6:c3:dd:b1:6a:b8:ea:0a:86:a2:cb:e6:af:09:ff:
8b:20:55:d1:7c:d4:c0:b2:6a:86:05:f9:32:d4:4e:
b0:94:af:38:84:f3:aa:3c:a9:e8:8a:67:cb:81:91:
bb:df:7b:68:90:b2:62:5c:03:2f:99:60:cb:6a:2c:
e9:1a:b9:83:f4:fb:c8:8d:4e:39:12:68:7b:0c:7f:
28:bb:85:bb:d8:95:87:e3:74:31:60:02:b6:df:4c:
8a:0e:b2:ab:5a:9a:b6:e3:ea:d4:4e:86:d2:24:dc:
9a:7e:c4:ca:43:ad:e7:80:68:54:6b:33:99:8f:08:
22:10:bb:13:14:53:bd:56:0f:a5:c5:23:86:ab:81:
b2:b3:4d:96:75:1b:63:e6:24:c3:f0:70:a5:b3:1f:
0a:1e:14:04:07:7c:37:af:1d:8c:5f:0e:7a:a6:13:
83:21:1a:5f:9d:e6:fc:d6:dd:29:c7:0a:fc:30:6e:
5a:de:69:02:3d:52:45:96:79:c4:7c:18:9f:3b:f4:
46:48:b2:3b:85:90:b3:6b:26:be:2f:10:4d:7d:37:
a6:e1:c8:9a:31:c6:2d:34:d7:21:cc:7b:5b:2c:a1:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:39:EC:B9:75:FD:75:A6:31:AD:FB:9C:D7:AA:58:0E:AA:98:69
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:29:63:2d:a7:9b:31:ea:d1:3f:32:65:a0:92:e5:90:1b:31:
81:2f:ab:80:66:87:5f:64:52:bc:69:12:d4:af:ab:6c:5b:16:
0f:b9:71:10:ce:8f:60:3b:05:d2:d8:2d:9f:05:89:72:3d:d5:
1d:ad:6e:65:dd:d6:d0:0e:76:6c:2b:ce:46:79:c5:98:4e:34:
07:2e:3c:2f:b2:53:b8:de:86:97:61:3d:57:3b:83:fb:a6:33:
eb:b4:d7:7d:f9:d9:98:7b:0b:fd:29:07:6a:ce:1e:f5:50:41:
7b:4f:b2:d8:37:1c:a8:c7:c9:7b:d0:50:a7:c0:65:b5:51:1f:
88:c2:e5:ab:3e:e7:18:84:59:ef:b2:32:c3:4e:b5:63:ba:a9:
2a:a0:91:a7:fc:86:e2:a8:59:04:1b:23:b3:27:59:50:0d:38:
b7:ba:b8:80:60:91:7a:d1:09:8b:60:65:07:e2:0b:9c:c7:44:
2b:51:14:9e:eb:4e:0c:3d:c7:b1:53:11:58:3b:2a:84:7e:e4:
5f:92:f3:e4:60:7d:69:0f:16:ec:ef:1d:a6:a7:54:b6:ca:ab:
c6:0e:29:4d:66:07:69:85:31:8c:b1:fa:36:b8:03:85:6c:b0:
b7:d0:81:f0:2b:c3:e6:b7:b4:6d:8c:36:bd:de:c5:bd:fc:e4:
d5:6a:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:04:09 2025 by rpki-client