Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: +GJSIpdrK8505pM4WYiBdghRsiqq7+um6xKYkH3Ne14=
Subject key identifier: 85:A4:EC:2E:FC:A6:49:98:24:70:CF:8A:64:4F:04:E2:AF:46:5A:3C
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 0194BCA9E14A611B6B51DB752C998A493827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: Z6ezJbCBTgwqER0+7afBVtzhXzKcgePQc9TmfXCxow8=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:4a:61:1b:6b:51:db:75:2c:99:8a:49:38:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=85a4ec2efca649982470cf8a644f04e2af465a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:fe:e8:19:64:85:65:a5:a3:5b:ed:8b:b6:
d1:68:2d:eb:ea:81:51:18:ed:c5:34:d8:6d:02:18:
f4:00:d1:25:99:f4:b6:5b:f4:e3:c7:49:d6:b3:50:
87:6c:0f:1a:4e:6d:f8:f3:2a:b0:79:dc:3d:fe:a7:
4c:ae:6b:2b:73:0f:20:38:1b:27:d8:d5:0d:ac:12:
b4:be:7b:db:14:f0:4f:c6:bd:0c:d5:c7:03:59:0b:
92:a9:1a:23:b1:26:23:5a:43:4d:0f:a5:82:83:8d:
37:12:f2:2e:8a:44:af:8e:d1:92:d2:2a:d7:8e:bd:
4d:46:51:61:ec:6e:c0:83:fb:1c:f8:cd:56:b0:fe:
33:a3:03:33:ff:f6:d1:3e:1e:a4:a1:04:d2:4c:06:
3b:7b:6b:88:11:62:cb:23:0f:86:f2:ef:e4:81:c7:
25:eb:a8:d1:53:e4:19:d2:fe:c3:d5:3b:cf:4d:a7:
6f:18:14:f0:78:9a:1c:06:bf:65:09:d6:3b:65:e2:
c1:a0:a3:a6:de:83:52:8c:20:79:e8:0b:52:e3:5f:
fe:92:cd:5f:e2:a7:68:75:e3:a2:08:4d:6d:4d:0a:
7e:d9:6f:36:90:07:6d:dc:0e:68:50:10:42:cd:62:
cb:f4:c0:e5:de:a4:d6:48:ee:94:39:78:52:51:84:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:EC:2E:FC:A6:49:98:24:70:CF:8A:64:4F:04:E2:AF:46:5A:3C
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f7:32:2a:76:4e:23:87:29:d7:96:98:d1:24:db:37:5f:0a:
59:5f:fc:59:2b:2b:73:ef:e0:9d:e8:f6:c9:96:45:0d:a6:18:
cb:9e:dc:8c:24:31:db:f3:46:c9:10:02:a9:a3:03:ca:fd:dc:
1d:bd:7d:e3:f3:3e:cd:a9:22:22:3f:5b:f7:1b:9d:c4:2c:54:
89:b8:e3:2a:a1:18:5f:17:e9:cb:04:3e:49:55:ce:cf:31:9f:
af:c5:74:42:be:74:c8:31:4a:3c:62:17:6b:3d:79:20:e1:46:
0d:d9:fb:8f:0e:21:d3:c7:09:45:c9:ab:cb:b2:45:2a:d6:1d:
b0:2a:43:e6:eb:c0:9d:ef:02:f3:ec:57:a3:a4:99:3b:f9:86:
b9:15:74:bc:79:44:42:3b:c7:bb:cf:e4:3e:a9:3f:3b:55:32:
7f:b2:3f:a5:8d:92:8e:d7:9c:cc:a2:e1:9a:4a:01:c0:6d:9b:
91:18:15:b3:c0:21:1f:a2:1a:e2:f2:73:aa:d5:5b:9e:b7:bc:
2f:8a:64:93:08:ec:83:6e:24:ba:62:07:a3:be:76:00:64:dd:
18:97:de:af:2e:50:e6:3c:0c:24:ed:74:1b:e2:d8:82:aa:4f:
20:66:65:6a:c4:75:bb:1b:a8:2d:ab:0e:fb:e2:2d:15:02:4d:
2c:fe:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:35 2025 by rpki-client