Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: HK8iz2tMPHMIkTCkffgXF2B55+cV9hZtsUPzs6MMK88=
Subject key identifier: 0C:9B:DB:F2:70:2D:B9:32:2F:D7:A4:8E:2B:AF:79:0E:E0:6C:04:AC
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 0194BCE0A6EDCF5A69378A259D8F4252DD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 068B
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: oR0olVe1+sG4OLiDOn9VGh+B+smvH4N28vufft1xs58=)
2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a6:ed:cf:5a:69:37:8a:25:9d:8f:42:52:dd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=0c9bdbf2702db9322fd7a48e2baf790ee06c04ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:c6:12:d1:92:eb:94:9f:d4:fb:93:b6:5e:
1a:f2:13:cb:e4:93:32:ec:8c:58:a0:04:6f:47:19:
f9:1d:d1:fd:3a:e5:1c:da:c7:9c:2d:7d:e6:ba:d8:
e0:1e:be:1a:a8:e9:76:6f:5e:a5:8f:da:bc:05:0a:
bd:7b:e2:76:f9:7f:46:aa:24:0f:90:f2:d5:4a:81:
22:e3:1e:f3:9a:47:e4:6f:43:45:d9:29:a0:9a:b4:
10:0c:cc:ce:75:ee:d2:12:5c:72:e7:09:88:d1:13:
5f:f5:7f:6e:88:ba:ca:e9:ab:d4:8a:d9:61:03:7d:
7e:8b:50:1b:43:aa:a1:84:9c:d6:26:87:0c:98:06:
bb:90:bd:f4:aa:e9:ac:7a:a6:81:e4:4c:d3:46:e5:
3d:27:cb:d2:49:1f:b8:18:8f:db:67:23:8a:2f:66:
5d:68:85:7c:ad:d1:a8:d7:ef:0b:8d:d4:e4:68:3a:
20:c5:f6:ec:e9:5a:04:66:46:97:9a:9a:6e:48:d5:
2e:1c:6e:d5:05:09:b9:52:83:0a:4e:bc:fc:15:5a:
72:71:0b:cb:a8:68:80:46:f3:70:e4:7d:b1:ba:ae:
1e:36:0f:22:b2:dd:23:9f:f9:1a:c4:5b:05:41:31:
4e:e3:ee:70:53:a6:49:0e:e1:4d:26:db:6e:f5:e6:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9B:DB:F2:70:2D:B9:32:2F:D7:A4:8E:2B:AF:79:0E:E0:6C:04:AC
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:c4:cd:d9:a1:51:54:71:45:c6:7c:07:36:de:10:3f:8a:
21:09:91:d0:b2:d3:78:7d:1d:7e:f9:14:7f:03:76:66:74:e1:
19:e3:0c:31:7f:0f:8b:90:82:1b:15:9f:72:b7:e6:c4:1f:41:
6f:6f:4b:58:19:3c:04:63:6f:f1:d4:42:16:96:e7:91:19:37:
4e:08:49:a5:6f:b2:e8:64:6f:b1:14:c6:93:4a:1a:aa:07:3c:
c0:fd:da:9b:32:ce:c9:12:0a:b7:e3:c4:30:eb:f4:dd:fb:9b:
b5:61:9e:3e:4c:76:57:5d:56:22:f9:54:8b:19:23:20:18:0e:
8a:c2:fe:65:ab:cf:ba:be:86:98:ce:4d:7a:e1:29:05:2e:e8:
0e:ea:58:ab:e9:d4:3e:86:7c:29:3a:c3:94:c4:79:c5:b2:9c:
78:de:1c:c7:a1:3b:9f:85:5f:7a:e8:e4:d6:f9:87:32:77:94:
e9:c2:94:8b:05:cd:0a:99:de:c6:da:1b:6a:ed:60:6f:ed:3f:
10:95:3e:da:2a:5d:3b:82:33:3f:9d:19:d7:2f:d4:45:4d:05:
07:dc:d9:2c:ac:63:5e:7c:59:35:a8:97:59:ea:64:ed:84:dc:
b3:09:38:20:ef:f4:10:bc:2c:da:c6:cb:e3:03:9a:55:53:74:
62:2f:df:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:03 2025 by rpki-client