Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: lyb/aC01yKCT1DEqEt8Xnl3j6tFLItA8fDcL49eI05s=
Subject key identifier: B1:D0:53:68:C0:39:0D:E2:9A:19:1E:C0:26:63:BA:E4:5A:8B:8A:94
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0194BCE0D26DB7B76295B1DBF32A94CF6845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 0263
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: 3kxIPS2qzaxqrvjKezSM+NOX3VM0DOJj1o4V4hSg0N0=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:6d:b7:b7:62:95:b1:db:f3:2a:94:cf:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=b1d05368c0390de29a191ec02663bae45a8b8a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:b8:dd:a7:a8:8b:50:de:8e:a4:56:5e:7c:
0c:b2:cd:e6:e8:b3:18:b3:d2:1e:00:07:1f:73:b6:
48:78:ec:25:1d:9f:e8:b6:8b:59:07:36:0f:8f:cc:
9a:49:43:c3:f2:69:9e:89:92:c8:60:98:e5:04:4a:
ab:10:c2:c0:c1:be:6d:b3:d5:78:ec:bc:cb:01:f4:
a7:7c:8d:56:11:c1:f7:43:fa:82:82:58:05:9a:d2:
5e:33:6a:f7:8c:e7:5a:55:13:42:ad:55:3b:18:a1:
10:1d:22:22:08:8d:7c:d1:c6:5e:73:a3:3c:d5:c7:
23:40:74:0e:5e:da:eb:ac:4a:18:6f:cb:dc:2a:c3:
da:28:7b:f7:4b:02:8d:8c:ac:0f:0c:43:8a:dd:10:
d7:d2:58:01:5c:17:b7:3e:90:a7:e6:98:2c:0d:88:
9f:2a:3d:65:3b:b2:4d:f5:ca:47:13:a2:17:5e:23:
03:ba:8d:32:b6:24:ac:3f:99:fe:db:5a:c7:1c:1a:
2e:17:9f:17:1b:c7:b8:14:c3:6e:7c:ff:ea:32:db:
48:2c:d0:e0:be:e7:a6:f1:ec:31:e0:48:c1:82:0f:
8b:8f:67:8a:72:b8:c9:a2:3d:68:93:8f:a1:74:58:
75:ea:50:7c:bd:34:a9:f5:62:37:83:2d:99:85:1b:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:53:68:C0:39:0D:E2:9A:19:1E:C0:26:63:BA:E4:5A:8B:8A:94
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f2:6e:97:f4:ce:6f:b1:0b:20:68:77:c8:91:31:26:30:26:
e8:4a:e9:cf:4e:b3:43:29:d0:38:b3:1c:02:81:31:01:be:5d:
35:0e:9f:b9:76:dd:28:29:9f:f3:58:a9:87:5d:f6:97:83:d0:
78:4e:d7:03:00:db:f0:27:85:91:7a:f5:05:eb:25:66:a9:d3:
19:70:7c:cf:0f:c3:04:ac:bf:94:4e:4b:07:e3:94:27:1a:2e:
b5:e5:56:b6:3a:e1:c9:f8:6d:3f:60:51:63:88:aa:b3:1e:d2:
9c:73:f9:60:cf:de:38:88:d5:52:49:09:28:67:fc:d9:bb:1b:
ed:4d:30:58:94:77:b2:ba:3d:17:6d:36:eb:5b:c5:45:ff:31:
c1:ac:ee:57:fb:88:e7:2b:70:1c:f9:f0:9a:0e:63:88:e0:fb:
3d:b6:e3:26:f4:78:87:ef:3d:97:c1:15:72:f0:a9:c5:44:a4:
78:79:59:db:16:11:04:f6:86:36:6d:a2:ee:8d:78:ff:57:65:
0b:69:d9:09:34:df:04:1f:8d:bf:5f:b9:5c:95:47:a3:ea:d1:
9f:3f:3c:d0:38:d0:4f:c6:30:ac:6d:06:00:5c:8b:9d:f5:ec:
bb:03:c0:a7:1e:c2:89:a1:e5:4e:40:1a:25:39:0a:80:64:a7:
c5:8d:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:31 2025 by rpki-client