Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: wW4N8fCpH0wOgvMqfRHigC5aAoDCd8C5p9c85UDyeCE=
Subject key identifier: 15:E0:56:01:69:D8:44:A2:F7:71:F8:6F:96:E4:B1:39:FF:DB:63:61
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0194BCE09D754810A71B3DFEC0E769661584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 099B
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: x57HzxKZjRNQLlAbPcQCYFbvhKgvEmemtfFQQzFoXWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9d:75:48:10:a7:1b:3d:fe:c0:e7:69:66:15:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=15e0560169d844a2f771f86f96e4b139ffdb6361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e8:65:eb:ed:76:f6:cc:6b:4d:72:15:c1:cc:
b3:c0:59:bf:8e:62:c8:5a:ca:ba:99:76:0f:62:c8:
83:8e:13:e5:c0:c6:0d:dd:a3:f6:de:b7:52:49:97:
a9:56:bf:2d:64:d2:75:53:cb:7e:d3:dc:c9:5d:04:
8b:b6:e7:82:66:5e:9f:72:48:35:3f:ce:cc:ce:8e:
fa:5e:72:2c:d5:4f:dd:91:ef:87:d2:8b:d9:f6:5e:
77:8d:21:23:dc:9f:8f:1a:80:a5:27:38:36:4e:04:
70:72:0e:91:8c:bc:8d:18:50:5c:a1:9f:80:03:e0:
6d:d0:ce:46:53:9d:00:94:52:11:d4:1b:fe:2f:e7:
c3:c2:01:74:1e:4f:4f:bf:89:f1:ca:c3:69:fe:72:
86:94:55:bb:3e:de:1d:25:e1:86:55:50:af:84:45:
05:bc:ff:b9:cf:df:73:c9:57:51:21:1e:4e:ff:fb:
2c:ad:f3:da:43:fb:88:10:ae:be:fe:3d:45:8e:04:
29:9c:84:14:6d:5c:a1:7f:84:5c:01:78:3c:89:9a:
fc:05:d1:d8:f8:5f:4b:bb:5d:de:f8:c0:d8:f4:4d:
21:e5:0e:ac:73:f4:bf:92:c7:3f:68:ea:b7:df:24:
99:7a:2c:0d:2a:3c:14:c3:07:6a:29:9e:80:4f:9c:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:56:01:69:D8:44:A2:F7:71:F8:6F:96:E4:B1:39:FF:DB:63:61
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:13:d7:02:cd:78:7d:d7:56:66:e4:3a:78:93:7e:be:1f:be:
0f:16:36:a0:3d:ce:43:b0:4d:5b:33:35:ff:57:2a:e2:63:3c:
bb:c4:4a:7b:d7:f6:39:54:9c:f2:28:ac:fa:8b:b6:f1:f1:15:
d2:bc:2c:98:e7:43:7e:83:fa:79:74:9c:40:b5:33:d1:53:4c:
aa:49:23:4f:e3:8f:31:a6:1f:60:a0:4e:55:eb:33:d7:01:e5:
c2:da:04:16:fa:52:2f:38:ee:5b:06:dc:0e:da:43:a2:21:af:
3c:31:9e:c5:6d:12:ab:28:b4:af:eb:7a:3a:f4:1e:59:92:48:
5e:46:90:c4:fe:4d:94:30:b1:2c:49:8b:9e:f0:7d:af:7b:96:
33:06:86:0c:b4:5f:08:7b:df:d5:f5:ca:a3:24:05:33:47:b6:
00:db:f5:e6:38:ee:ed:d6:3e:7d:70:e0:87:cc:07:cd:39:c5:
f5:ff:63:b7:05:c3:69:d7:0b:99:6b:5e:5e:c5:b8:0d:a6:72:
67:1f:55:a4:59:56:a0:06:6d:fd:56:26:fe:d8:98:e3:10:02:
3f:33:9a:4a:b6:a3:e7:cc:40:c8:b0:3f:a1:ea:e3:d2:91:6d:
0d:a3:54:b4:39:a5:0b:81:d8:e6:dd:3e:d5:d2:fe:92:bd:d1:
2a:b8:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:16 2025 by rpki-client