Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
File: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft (raw, json)
Hash identifier: sEbhPMosf0PFKTxAnoQJIf2XvUetpBGfVG2B/cGP8Q0=
Subject key identifier: 31:03:AC:D8:99:30:AE:44:61:6A:0F:9C:CA:29:73:B2:5B:1D:AC:A7
Authority key identifier: B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
Certificate issuer: /CN=b77627cafe755785750bde5ba49e6c1091bf4247
Certificate serial: 0194BD4E8659B51698642F01769BA1FC1CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
Manifest number: 0C20
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: QR0_yngod2ytYXVRxBdIJaGQtD8.roa (hash: ltA6YElUsxrQZ+fMVYaCHWCNPW6fU+6PIrwsYryAwAU=)
2: t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl (hash: RNSAjBVlvaOxHdC86O2JLYIpdf5tXhsDi8dHLPNFYjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:59:b5:16:98:64:2f:01:76:9b:a1:fc:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77627cafe755785750bde5ba49e6c1091bf4247
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=3103acd89930ae44616a0f9cca2973b25b1daca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:dc:a4:d2:a8:e8:10:c6:fb:00:28:1e:1a:
a9:0b:b4:5f:34:a6:f6:59:12:a9:71:21:a7:69:7c:
24:bd:3a:7b:1b:69:81:88:87:b9:c3:50:32:c0:ff:
2d:d1:98:01:3c:f8:dc:26:f0:a2:64:57:0d:8a:67:
83:49:32:b3:16:b0:1d:68:0a:d8:f0:30:7b:19:7f:
e5:1c:91:f1:82:75:8f:ad:bc:5f:21:c3:38:84:95:
9c:47:af:cd:d2:99:d9:68:64:99:e7:34:39:0f:39:
e7:bd:6f:70:30:63:11:b5:2a:be:a9:5f:f3:63:a6:
4b:6f:4f:20:8d:fe:6b:1c:1a:ce:10:c9:0d:15:fb:
38:72:2c:5b:84:71:da:ba:78:ca:ea:85:95:62:47:
3b:0d:16:cf:92:46:c5:4f:ca:ed:6b:bb:de:23:ac:
ce:e1:a5:73:16:4f:72:45:d8:30:83:82:e3:ef:82:
53:82:3f:40:e6:e5:41:df:3d:6e:a5:db:2a:74:37:
6d:86:4d:30:ef:17:f0:c9:3d:fb:d9:6a:58:ed:c6:
3a:46:0f:07:40:bf:93:70:b9:f6:4f:2e:4c:17:a3:
7c:89:5c:8d:56:81:9c:66:c5:fb:3b:bd:05:8f:ee:
5f:3c:c0:67:5e:37:d5:ac:e6:91:bb:34:ff:7b:3c:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:AC:D8:99:30:AE:44:61:6A:0F:9C:CA:29:73:B2:5B:1D:AC:A7
X509v3 Authority Key Identifier:
keyid:B7:76:27:CA:FE:75:57:85:75:0B:DE:5B:A4:9E:6C:10:91:BF:42:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/602137-dd40-4ef9-bb0f-4457fa20bcba/1/t3Ynyv51V4V1C95bpJ5sEJG_Qkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0c:67:24:be:19:30:4c:01:4b:63:9a:f4:32:7c:7c:48:12:
85:73:f6:a5:19:31:7f:30:69:6a:ab:f0:bc:c4:4e:ad:e2:ba:
e8:d3:37:d1:4c:55:d2:da:09:d2:23:18:dd:bc:29:b3:7e:31:
76:9d:a7:5f:5a:c8:df:e9:dc:e1:3e:77:c7:e3:a1:d4:5f:c0:
85:bb:9c:fb:16:d2:18:13:88:a0:d9:a8:ae:b2:0d:27:e7:87:
3a:75:48:8d:fd:0a:50:b2:db:ca:65:c9:81:ee:40:98:9f:a6:
d8:fe:8c:4e:0b:12:30:63:6e:03:cb:61:18:7a:d9:57:cb:90:
7c:a1:a0:32:41:09:2a:3f:02:24:8b:b3:3b:51:db:5d:0a:44:
84:d5:f0:d8:86:b4:01:4d:2d:ae:b0:25:35:60:7a:bb:ae:70:
ea:1e:f0:19:31:cf:1c:ec:2d:6e:29:15:89:2a:c6:59:4e:59:
8b:44:24:4d:38:cf:e8:6d:d4:65:65:42:ce:eb:71:be:c6:0b:
7e:df:81:59:a6:0d:78:fb:5d:c6:f3:1e:6a:1f:d0:63:18:0e:
99:d9:f0:47:11:eb:c3:42:b9:fd:3d:ee:42:a0:fa:27:3b:8e:
f4:43:a3:ae:67:d3:a3:78:19:04:2a:07:6b:44:22:87:12:bc:
f9:91:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client