Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier: qwl1U9PQXrwVbGFrCungjPufYSxyiVSTdf9tdAk1vEQ=
Subject key identifier: 59:51:C6:D2:14:62:57:4E:DD:AD:A9:14:04:1F:FA:B7:4A:4E:22:C0
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 0194BC7314D05D180CE7A681885E955F7918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: 7qX1+9hPtiqaQ6EqoPFZfNpejdmzCh9NJ2zVxDXBzRs=)
2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:d0:5d:18:0c:e7:a6:81:88:5e:95:5f:79:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=5951c6d21462574eddada914041ffab74a4e22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:f4:d9:8c:0a:ad:0c:2d:b8:e9:8a:a5:26:
81:ee:91:2e:4b:3a:30:2a:9a:59:98:f4:81:68:94:
b2:9b:cf:16:d1:80:bc:38:2e:2e:c9:e4:19:24:65:
4a:4c:b7:0f:25:d1:8d:fd:89:46:a5:6a:39:4c:a8:
e3:8d:20:f4:c5:eb:10:0c:61:f0:21:23:0d:0d:71:
81:cd:cf:7c:a3:ca:32:90:49:5a:f5:3f:d8:38:69:
9f:c6:56:d9:10:c6:9c:43:be:f2:1d:d8:9b:01:67:
ed:ea:36:af:47:01:dc:52:ef:5e:79:39:ab:b2:de:
b6:8e:56:e9:1d:c2:14:9c:dd:66:40:46:9e:a2:47:
46:7e:21:de:9c:8c:d6:8e:3d:ba:d6:1d:12:7d:9b:
de:aa:7d:44:17:b5:97:60:14:54:3e:0d:bf:d2:c8:
d9:04:a5:49:39:ea:ec:24:ff:22:a8:3b:bc:a2:58:
d2:cb:97:46:c8:86:3d:72:85:5a:0f:f3:4f:97:39:
bd:d4:cc:4c:88:6c:f9:65:b9:e9:44:56:a1:51:67:
e0:b4:ff:f3:75:c3:c0:1d:56:99:33:1c:cc:6e:62:
32:c8:3c:61:97:fc:6c:81:99:be:8a:63:57:94:c0:
bd:e5:ec:42:c1:b0:8e:b7:39:77:4a:ec:87:28:af:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:C6:D2:14:62:57:4E:DD:AD:A9:14:04:1F:FA:B7:4A:4E:22:C0
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:05:7a:1c:56:aa:f6:52:7d:cc:64:de:ce:7f:6d:22:bc:54:
b9:0f:b3:f8:cd:f4:72:5d:0a:8b:39:ef:1c:c7:8c:af:98:46:
4c:9a:5c:24:62:2b:e7:07:e7:fd:fe:39:dd:58:38:8e:5b:ef:
ab:c5:e2:90:77:fe:89:06:57:be:46:c6:ca:f1:d7:f2:2d:6f:
55:f6:23:69:4a:65:5b:aa:06:cd:40:04:36:4c:9d:12:e1:8e:
24:74:e5:b4:dd:d9:e5:40:62:95:2e:aa:12:b1:e7:fe:63:e3:
c6:a9:e6:ef:2d:f9:08:2a:25:62:60:6c:11:39:93:cf:7a:e4:
4f:ee:4b:70:82:b7:99:21:dd:48:41:2f:b8:6b:81:a1:61:f9:
df:a3:e7:da:f4:3d:24:e6:38:5f:fd:cc:02:4a:5a:28:7d:7f:
ef:d0:69:7e:f2:8f:d8:15:60:ce:84:b0:fd:4c:e1:7f:6f:64:
96:33:aa:2a:9a:dc:ba:b1:ac:61:7d:78:d8:9d:25:12:1f:1d:
8f:fa:d8:36:cd:8c:aa:c5:0b:f3:99:b9:36:e0:e7:cb:ff:85:
ad:0c:16:ce:18:2d:1c:f4:a2:20:0d:c2:9e:72:ff:6b:09:8a:
54:78:d1:60:c5:0f:27:1f:47:3f:c2:6f:7d:99:eb:8a:e6:c2:
ff:71:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:30 2025 by rpki-client