Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: JNNlTq9NkfS01InSng0GDp8L2BNe4rO84GW5WJeO8+s=
Subject key identifier: 26:89:C0:08:AB:6A:7A:39:40:B3:58:3E:86:D3:55:D8:73:FA:79:9F
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 0194BD4E78816924BD071D200B23DA85ED9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 0195
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: WFQrYtzg0wXZ0_HEWDci9z7QJjA.roa (hash: FEyf6kH3cUePOo9mPRSNvRoDQMoA3uUlJo7Y4wOsw1E=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: TGlqqnaSYp5YvgQ8QbovNXXSeN4FEpetkBTgxXiP064=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:81:69:24:bd:07:1d:20:0b:23:da:85:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=2689c008ab6a7a3940b3583e86d355d873fa799f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:be:29:6d:9c:ae:58:72:5d:2a:b0:c5:3c:
00:71:d1:13:49:07:a7:c5:b7:4f:c8:48:a3:ad:59:
f2:ae:22:2d:c1:9d:f5:18:15:4b:5a:26:76:9c:dd:
e5:65:55:8c:cf:c7:b5:1c:6c:83:e0:41:9b:4e:4b:
7d:5f:dc:f8:6f:18:73:22:39:27:ed:44:c6:83:c9:
02:fb:09:37:7f:24:9c:81:ce:b3:96:07:1b:38:4e:
4f:ad:5f:20:60:38:59:01:1b:a4:8c:e6:08:7f:b7:
ca:b5:14:d8:24:54:02:7c:27:41:9a:59:5c:99:41:
fe:3a:23:ff:46:8e:ca:9d:5a:34:42:8f:94:04:f9:
d1:7b:9b:d9:4c:37:f0:6f:c9:17:c6:cf:19:15:42:
55:cd:ef:73:30:e6:4e:84:6b:87:9a:5c:70:76:d8:
bc:ef:37:24:16:f3:dd:fb:b1:b6:62:fd:69:96:e0:
06:27:9d:c8:88:b2:5c:d7:dc:a3:e1:21:db:5b:5b:
4b:2f:0d:a7:94:17:af:c9:e5:90:fb:a3:5d:87:3a:
5b:a0:c5:e7:66:15:4a:b2:44:0a:6d:4a:9e:4b:3a:
fe:be:2b:b6:fb:54:58:65:a1:9e:20:2d:33:72:77:
f1:98:3a:8f:e0:db:d8:c8:e0:4b:08:ec:30:48:75:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:C0:08:AB:6A:7A:39:40:B3:58:3E:86:D3:55:D8:73:FA:79:9F
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:73:17:58:8a:db:c1:83:1e:81:e7:5f:ad:2f:c5:a7:61:c0:
b9:ce:7e:8f:0f:f3:53:85:1c:96:41:b5:4f:9a:d7:18:43:35:
cf:c4:8e:01:34:02:05:57:ad:88:8e:47:6b:b3:6a:5a:20:80:
4d:64:46:3e:7f:31:dd:a2:43:87:82:b9:c3:6d:ed:d5:24:3d:
7f:d7:81:60:31:a5:88:b0:5a:1c:f0:e9:3a:14:56:13:6e:d4:
28:c9:16:4c:91:2e:7c:75:16:b1:a8:61:4d:9c:01:92:fd:bc:
ad:c4:61:4f:a8:93:5d:df:08:79:27:ed:5d:08:3e:88:34:9e:
18:21:de:1c:62:74:a7:c0:80:46:33:51:e9:99:b5:b6:cf:aa:
30:37:3c:26:97:59:da:7b:52:1c:23:90:17:c3:7f:d4:cd:50:
d7:ae:67:87:d2:7f:cc:75:4f:ec:00:32:22:fe:71:df:88:9c:
d8:9f:be:03:3d:f5:3f:af:d0:c8:c5:22:5c:0d:4c:dc:7b:71:
de:33:15:47:e0:e4:e1:d7:b9:4b:90:d4:14:03:dd:d2:7e:24:
c0:75:03:e3:32:58:00:56:10:81:e8:3c:be:fa:3c:1f:68:05:
12:e0:85:0f:50:7c:1c:bd:f0:e4:02:92:51:cc:71:08:13:3c:
f7:e8:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:12 2025 by rpki-client