Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: iNhkandAtJnIluE8fp8OF2blwnoXFMKRLg7hm/Dw0tg=
Subject key identifier: E0:B1:9B:14:78:DC:FB:0C:AF:11:C1:07:B7:D7:A6:92:20:7A:2E:B5
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 0194BC3BDECDF730796419B1712D71AF38FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: XTgCMgsVhnOL6nmNrr4leLLcCHVje3zx0DllEB4E4ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:de:cd:f7:30:79:64:19:b1:71:2d:71:af:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=e0b19b1478dcfb0caf11c107b7d7a692207a2eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:24:0c:7e:e1:f7:cc:11:91:40:64:28:00:
50:80:00:93:62:29:0b:04:fc:f7:9f:d7:92:a9:cd:
a5:a2:29:f0:82:f5:1a:45:eb:93:cc:06:af:8c:7c:
6a:13:12:d0:cf:20:9a:2a:59:16:4b:5c:d3:ec:0c:
59:7c:6d:36:2d:4b:ca:db:93:d9:f3:23:af:8c:5c:
9a:7d:6b:1f:f1:b9:4a:01:35:b4:39:fd:e4:90:a1:
0e:70:0a:8c:3f:5a:e1:63:8b:ea:4c:9e:b3:d7:34:
8b:7f:57:36:17:48:ab:70:28:51:1c:9f:c4:9b:ad:
c2:3f:76:98:f6:40:93:0e:e8:43:b4:98:5c:5d:06:
22:b8:f4:7b:38:31:24:86:b1:5f:74:c7:d2:97:fe:
b5:09:f2:93:7c:11:e6:1c:ee:90:d4:1c:44:b0:94:
2a:59:f0:28:45:64:7b:13:8d:91:91:7c:bc:23:6b:
1a:49:06:ba:1a:e4:a4:2f:ab:44:17:9a:0f:e1:c9:
01:8b:92:cc:2b:b9:11:1d:0d:cc:61:01:01:cd:1c:
54:6d:90:81:e6:6e:4e:5f:95:9b:07:1b:27:8c:f4:
c3:bc:e5:46:e7:21:71:5e:a1:bb:4b:d9:32:31:7b:
d8:5e:2d:04:1d:b8:6a:8c:ae:f7:1f:01:34:5a:0e:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B1:9B:14:78:DC:FB:0C:AF:11:C1:07:B7:D7:A6:92:20:7A:2E:B5
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b6:93:f6:87:90:65:c2:a5:bd:89:a6:c3:17:e1:6f:7d:bd:
91:75:f7:f5:e8:92:23:10:84:e7:64:29:b4:1f:01:d5:51:83:
4b:7e:8a:30:ee:eb:ca:c1:73:e6:7f:db:c4:a7:e5:67:bc:9b:
7d:ea:7e:70:15:a6:31:da:06:6a:ba:19:0a:e4:ed:da:9b:51:
17:2d:82:5f:f9:ff:ce:be:3b:03:93:8e:24:4b:0d:e9:e7:e0:
ef:55:8c:66:de:c5:99:3a:a6:6c:2c:52:a6:21:cc:fe:39:3e:
cf:af:ce:7c:50:a3:34:22:f4:ce:0f:8e:29:dd:f0:26:93:59:
1a:9d:01:bd:15:00:fd:5a:02:11:25:e2:01:ae:69:7a:b2:76:
24:07:7b:1e:67:5b:6a:b5:80:94:d7:ae:76:8a:1f:47:2e:93:
21:87:a5:bf:bd:2d:89:18:b6:8a:67:17:38:6c:df:1f:51:2e:
30:11:b6:5a:86:a8:a9:9f:1a:59:7e:8f:dc:99:16:4a:f3:91:
71:c3:27:62:b3:e4:f2:f7:60:c5:34:cb:95:07:39:df:84:a8:
a9:ea:c7:b0:ea:45:4b:34:ae:b4:b6:24:f1:45:28:1e:cc:c1:
fe:7c:a1:9a:47:41:09:96:02:55:8e:46:22:03:e1:fb:9a:e6:
02:40:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:15 2025 by rpki-client