Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: SdhkMDtl9+1Nbq4z6gOkZGodOeUO1dnXvKTgW1VzcB8=
Subject key identifier: 9E:1E:8A:FE:30:6C:E5:E7:8A:CF:C4:D2:7B:A7:CB:94:93:B0:DF:46
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 0194BD85B36410BF8EB1F9B91D19B20C3E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 0259
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: ngFeJ8Lqg9OsN7nqMn5w1kt6WbwksidJjxmFfcr7REw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:64:10:bf:8e:b1:f9:b9:1d:19:b2:0c:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=9e1e8afe306ce5e78acfc4d27ba7cb9493b0df46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:35:ea:ab:fb:a6:64:98:98:86:8c:46:0c:be:
53:16:49:4f:8c:8d:d7:22:a4:96:33:78:11:d3:f0:
88:6e:58:4d:48:4d:c8:a2:12:2a:a2:f5:c8:2b:81:
59:15:54:46:d2:d5:76:da:ca:f2:11:92:fa:0e:39:
78:37:fc:52:da:55:7f:6e:04:c0:39:46:09:d5:f4:
c8:7b:0d:cf:1b:c3:78:82:9f:10:82:42:33:84:9b:
70:e7:ee:b3:2b:92:f4:6e:4a:ba:b0:d7:38:10:e1:
b8:b3:bb:64:62:65:8d:08:6c:df:10:ec:01:cc:e8:
11:71:90:06:d8:63:26:22:cb:72:7b:22:13:1c:26:
30:7b:6a:14:86:ca:31:a5:b7:a9:9e:29:8f:4e:1a:
c4:e2:69:db:05:6d:d3:ee:bb:b5:71:1f:fd:d2:db:
24:bc:6a:9f:73:3a:13:1f:33:db:f0:3f:95:9e:66:
81:d5:93:9e:38:a1:6f:a4:8f:6d:94:07:f7:a8:19:
5d:3f:e6:e2:96:19:9c:3b:8c:f1:0f:fe:f3:84:22:
f0:23:b8:94:cc:3d:57:b4:73:d6:85:ca:24:c7:6c:
9c:10:97:74:3e:71:72:22:13:e6:88:8a:75:9c:5e:
5d:83:0e:5d:5b:3a:fb:94:9e:c1:c1:10:be:4d:04:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:8A:FE:30:6C:E5:E7:8A:CF:C4:D2:7B:A7:CB:94:93:B0:DF:46
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c7:ab:40:07:bd:40:a9:05:71:52:d3:1d:cc:b7:7e:21:b2:
cc:73:2b:5c:71:51:1e:b4:9c:a2:82:54:b3:3b:b1:10:ab:8f:
d2:8c:85:9e:70:5f:6b:45:5d:00:56:27:ef:49:5d:e1:39:78:
67:1f:c4:ef:4f:75:78:be:39:93:80:0b:65:37:98:8f:aa:e3:
20:fc:eb:62:2e:a4:24:cb:7b:d6:b8:62:e6:60:dc:94:b3:77:
35:61:d4:24:dd:ed:f4:a4:e8:4e:c7:e6:fe:30:60:50:96:69:
28:7d:e1:c2:f2:d3:86:e1:01:52:bc:07:6e:17:b9:e4:51:c6:
39:8a:d1:34:a5:22:23:56:6b:40:e6:50:5c:43:3a:93:b2:81:
4f:87:61:dc:d5:b9:e1:9d:30:65:35:af:32:d4:8c:a4:db:b0:
ad:9b:cb:5f:57:bb:50:66:e0:b5:27:7f:4d:9b:be:af:b3:40:
31:f0:3a:4b:2c:ef:53:c4:cd:b2:c9:6a:91:10:4c:31:b3:2e:
59:d6:8d:61:08:68:9f:9d:65:06:06:10:dd:43:8a:e4:80:c2:
b9:77:03:50:4f:cb:f6:4a:20:97:b4:fc:da:bd:5b:ca:a4:c9:
dd:25:f6:53:92:35:a3:a0:33:a5:65:df:21:b8:52:00:7d:b5:
1e:02:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:45 2025 by rpki-client