Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: S8ltdbkx91WJg65jE86j8egwXuojDhCxbaqWj3+raQg=
Subject key identifier: 0D:CD:A9:1D:3A:62:06:BB:B2:8F:DC:9B:5B:81:42:25:58:EA:9B:BF
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 0194BC3BC51A735D1A82CBDB28335BE5D602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0BA0
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: 4a1o02UoFWYuvLWn+kg/zdS74QBG2vVodhEeZOaRoPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c5:1a:73:5d:1a:82:cb:db:28:33:5b:e5:d6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=0dcda91d3a6206bbb28fdc9b5b81422558ea9bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:35:18:4b:94:f9:25:89:19:3d:5b:ec:44:
23:44:85:08:71:54:1a:07:31:69:1b:8a:8b:27:20:
b0:7c:83:47:a5:89:cb:bb:e7:b0:f8:5a:cf:b2:03:
c9:e5:f9:1b:71:3c:e0:d1:cd:ab:a5:86:b3:bb:39:
13:f5:ea:cd:47:24:c6:3f:8c:fe:ca:8a:97:67:66:
c8:fa:9a:fa:0b:e7:94:79:29:4d:b8:75:cb:cc:f5:
da:33:24:fa:25:c7:6a:06:51:ee:62:b7:11:06:6e:
2d:a2:c6:1c:7e:d4:7c:f9:c6:44:ab:8b:09:78:1c:
9b:1e:4e:40:7c:56:1c:fa:5f:cc:e2:05:47:08:3d:
05:3d:00:ab:9d:0c:39:ba:3a:1c:30:94:1b:f2:65:
5a:ed:f4:43:d0:90:19:6b:a3:27:51:62:06:74:53:
5d:0f:2c:46:0e:82:70:ba:ff:25:86:ab:ab:fb:93:
ff:59:32:3a:c6:20:f2:02:08:30:6b:9e:06:dc:74:
e8:1f:da:21:4b:7c:25:16:1a:fe:99:4a:60:22:2e:
72:f5:8e:21:e7:4e:81:6c:0b:56:62:e4:ac:81:c4:
af:fb:9f:ff:ce:10:08:c0:68:b7:a2:48:83:8f:40:
d1:ce:4a:c5:a5:51:79:95:4b:e3:8a:55:47:9d:ce:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CD:A9:1D:3A:62:06:BB:B2:8F:DC:9B:5B:81:42:25:58:EA:9B:BF
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:60:85:5b:e2:4c:c7:5a:26:f7:41:03:e9:8b:17:bb:ee:17:
2f:45:20:07:e5:2c:fe:1a:05:88:90:4b:84:48:fa:c0:5c:c0:
3a:ab:80:80:bb:f0:57:2d:31:6d:c4:63:ab:8b:10:4c:0f:0e:
80:78:42:a6:b1:f9:7d:b9:3b:ec:ee:63:46:c1:eb:65:f9:c8:
28:66:75:ed:b4:1f:7b:44:a7:6a:51:30:e4:d5:76:63:d5:fd:
f7:b4:fd:dd:84:e5:10:1e:39:0d:53:57:73:c0:dd:d0:03:1f:
c7:d7:54:ba:c7:51:65:8f:d3:6a:7f:fc:18:c6:99:6f:7e:3c:
89:05:86:ff:00:21:cb:10:f4:45:50:43:b4:b3:23:e8:f5:3c:
95:9a:4b:ad:86:21:4d:11:fd:0f:97:a3:b0:31:ef:4c:59:66:
a5:5e:17:8f:ab:c7:af:09:73:95:06:df:ca:9f:2d:9a:0d:28:
d6:18:5f:cc:8b:c0:88:e1:42:4c:5c:99:d5:41:c6:a4:7c:25:
2e:ca:6f:03:a1:4a:21:2b:d3:12:b4:72:aa:29:b5:b7:80:a7:
27:14:01:9a:c8:af:c3:69:1c:3b:b1:71:aa:35:70:a1:78:c9:
45:bd:11:78:d1:6f:5d:8f:01:a7:c6:05:d6:3d:92:b0:33:c2:
d4:2a:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:56:00 2025 by rpki-client