Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: ITM90I0G/8kGyJ90t9V8DHDyF1C6CMAC6ekiLpGCJb8=
Subject key identifier: D0:BE:8B:EC:2F:E5:05:E5:A3:93:38:CC:87:F3:1D:13:02:D4:91:D2
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 0194BC3BE55AED7F1AF8D4A47EB8C3724415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 83F_Jp7hhNkTyKzmQu0uAqQ-Hug.roa (hash: /GIKVjlq0TkCjqFIvHfnkG7+yghgu5kkQctxwrpV6qw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: Cj6ohm+9VwHn64jVKY0S2iD6lXr4FhQxGrBQFlySZCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:5a:ed:7f:1a:f8:d4:a4:7e:b8:c3:72:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=d0be8bec2fe505e5a39338cc87f31d1302d491d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:7f:f9:3a:f6:47:9a:b7:4a:32:59:3b:5e:97:
2c:17:c3:02:de:09:7a:e3:82:70:cf:03:e8:a5:75:
3d:36:5c:49:ca:ad:c0:e1:d1:a6:b0:51:19:38:84:
5e:b1:ee:a9:1b:f2:0a:df:32:e6:92:77:22:ff:b1:
31:45:de:23:b2:bf:85:11:68:14:7a:38:27:f1:a1:
ff:40:90:69:44:f1:ee:38:90:35:27:63:93:d9:fa:
65:8a:27:ea:6b:cf:d8:6c:dd:3a:20:cc:51:b3:ce:
54:5a:1c:f4:48:3e:31:ec:85:e8:f4:48:f0:e9:12:
57:ba:cd:31:be:54:9f:1f:3c:dc:06:f2:0d:d1:02:
f5:7d:28:29:7d:b7:91:c0:60:b5:9e:87:c4:d6:27:
d4:ac:bd:10:49:cd:d6:d6:51:81:c1:61:3e:85:3b:
89:80:dc:52:ba:87:bd:a8:7c:d3:d7:1d:62:ec:1d:
76:14:09:b6:2d:10:90:ff:73:04:59:35:07:c5:d5:
a5:e7:38:6f:d9:17:99:08:41:2f:a2:b6:b6:86:5a:
6c:d4:cb:b3:0f:44:e0:97:ca:d3:5c:c3:33:b4:95:
4a:d7:1a:93:a5:65:12:91:2c:18:b5:03:31:44:55:
fe:3c:3b:81:51:de:86:2a:f4:3a:ce:f4:ae:51:98:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:8B:EC:2F:E5:05:E5:A3:93:38:CC:87:F3:1D:13:02:D4:91:D2
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2f:0d:e0:24:a7:5d:6f:d5:b3:09:d1:10:9e:43:4d:d0:b7:
80:44:d3:ba:fd:07:ed:be:85:04:d5:7f:34:a1:d1:b5:e0:b1:
3b:70:3f:f5:96:f8:b6:c9:57:bf:73:35:19:40:fb:e6:be:0a:
69:4d:c4:89:98:32:90:cb:b9:58:a0:02:80:44:f6:50:6e:25:
15:eb:4e:1c:29:3c:a5:09:c9:27:20:4b:27:d1:b1:1d:a5:e6:
46:50:66:30:ba:6c:a5:11:93:fa:ce:2f:8d:1d:a1:a2:e8:43:
8a:04:26:88:e5:ee:29:2a:31:97:a7:96:39:68:fd:e9:f9:db:
38:23:d5:a4:5e:7f:e2:92:51:68:50:31:76:10:a5:f1:cd:51:
ec:46:3e:2b:d4:70:4b:62:02:c4:89:43:74:b1:9b:5a:37:fc:
2e:fe:f3:52:13:44:90:a9:e7:5b:42:4d:99:f7:59:c4:ad:7f:
a1:63:17:5d:17:37:fd:80:db:ea:88:26:4a:8c:a3:4d:9e:9d:
66:29:ce:0f:5d:57:db:22:7c:c8:69:16:9a:cd:55:37:60:03:
41:9b:f3:26:86:ce:af:5c:b4:24:0d:72:5b:a0:0d:5f:81:47:
d2:06:b3:a5:ba:da:28:5e:58:27:77:33:44:7f:74:06:45:b3:
30:9e:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:35 2025 by rpki-client