Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier: zaywyTrEQty+ocyE3ySsou+5DeqouJFgfZUUMgmGf3k=
Subject key identifier: 64:FA:F0:A7:BB:AE:93:5B:D1:ED:AA:09:64:15:80:10:1A:5A:A4:72
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 0194BBCE2AF6A8413FEA3DD686260494D67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number: 0DFB
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: Ga7xjXDSDjdOVNrcTGr_g6sBFW8.roa (hash: 8Y/Mjf2+mYXubhHwDguXMxh+k+JgGQC7Q5HSVi+iXpA=)
2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: p/UCWTp7ykAvS6PjiYoeRe1oNyTGqeRdjrU0NED7b64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:f6:a8:41:3f:ea:3d:d6:86:26:04:94:d6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=64faf0a7bbae935bd1edaa09641580101a5aa472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:37:dd:6e:1e:72:da:15:84:83:1a:be:4f:
c9:f6:9e:f2:d5:46:68:9c:d4:e7:d8:ba:64:68:93:
9f:c0:16:15:21:6f:df:47:f4:66:0b:2f:cf:be:03:
25:0d:3b:e6:1d:80:46:f3:66:87:88:8c:eb:5b:eb:
38:44:4e:75:c3:ce:16:16:98:70:c2:81:af:37:47:
69:c7:6a:64:2c:e8:27:1d:b8:19:93:64:25:47:88:
15:39:79:3d:6a:b0:20:53:81:47:10:c4:9f:01:fb:
11:99:c4:6d:f2:34:c8:e6:50:8f:65:6d:0e:f9:6b:
a8:47:3f:87:74:57:22:67:5b:cd:cc:17:a8:ff:cb:
49:0b:7c:0f:31:26:58:b3:f5:01:7d:81:0f:a5:31:
96:7f:aa:05:4f:25:f0:19:fc:7c:2e:3d:ee:92:c0:
6c:b1:5e:59:fa:03:dc:b3:39:7b:81:ec:2a:43:80:
cb:57:cf:76:5f:e5:a2:2e:e0:51:4a:21:94:f0:1c:
f0:ab:62:a0:85:f4:d6:3c:7a:00:c2:8c:63:5f:67:
f7:2d:85:1a:66:ec:6f:63:bf:87:f6:31:bc:4e:92:
ed:a0:fc:73:7a:26:9d:23:43:f7:ec:13:36:e2:be:
1b:23:09:b8:97:96:1f:ed:fd:86:4e:88:1b:5d:7a:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FA:F0:A7:BB:AE:93:5B:D1:ED:AA:09:64:15:80:10:1A:5A:A4:72
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:75:65:e0:51:15:52:28:8f:68:6a:26:59:18:56:28:18:
f7:72:a2:87:1b:b2:2d:f0:e1:fd:07:41:71:c6:65:f8:87:12:
b5:76:c0:db:8d:95:48:d7:62:d9:92:cf:02:a2:32:12:1c:50:
b1:0e:c7:43:0b:7c:f4:e5:22:84:43:60:35:85:8a:31:81:15:
ad:f2:70:bf:23:f0:da:cc:8d:06:ae:38:a1:29:0c:37:9d:6b:
bb:c6:45:33:3c:78:7d:f0:e4:73:08:8a:85:b6:41:06:86:74:
de:7c:a9:a2:d5:f8:10:e9:39:67:51:fe:60:b6:59:1c:ec:d0:
9d:0b:1e:bb:fe:c5:46:0b:5b:75:26:62:2e:da:12:7e:37:c4:
a9:82:83:f2:24:89:e8:78:46:1a:49:a8:66:9b:4b:40:04:a1:
4a:ce:41:9d:4d:09:b4:91:07:da:af:f2:87:e9:c0:3e:f4:4c:
74:c9:33:51:d9:0a:ec:e2:a8:d1:07:31:dd:18:3d:69:c0:32:
02:e8:29:71:6f:fc:aa:72:a3:54:62:5f:5d:de:29:d8:91:85:
dd:00:5b:c9:eb:a4:9f:75:bf:10:ec:b9:66:fa:5d:d7:41:5e:
f1:a2:54:0f:c0:fe:d7:88:24:3c:4f:e7:4c:eb:9d:44:2e:f6:
73:fd:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client