Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: 5MXnc80BXS3g+Fj+VO+FA9SKLl91/2lFil6HePjOvHo=
Subject key identifier: BF:8D:9D:AD:C0:58:1D:27:D7:5F:B1:42:E7:CB:A1:3A:10:F1:60:4F
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0194BCE06420DA47D82EC7536EBBB856076F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: qY7kAtKE+fyiAmc7jfoVk9riJJwZpU64/3FCl8i5wGw=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:64:20:da:47:d8:2e:c7:53:6e:bb:b8:56:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=bf8d9dadc0581d27d75fb142e7cba13a10f1604f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:cc:18:89:2d:ea:b8:18:6b:2c:b6:59:f4:
14:cb:28:b5:71:a0:59:87:7a:05:78:c4:94:ec:ba:
db:65:05:3a:3c:7f:d0:5b:9e:01:6f:1b:7d:a5:c7:
f7:5d:71:8b:39:d3:4f:56:14:af:82:25:99:76:3c:
5f:84:55:71:6f:1e:eb:36:79:5d:8e:ef:b0:3b:42:
b7:47:a5:d9:97:a8:f7:bf:af:67:2d:90:7b:f4:e0:
f4:7e:89:6c:1a:c1:28:3c:4b:a4:b7:f7:ba:d0:f6:
49:e2:a3:88:29:69:a7:8e:db:40:36:f7:e4:85:c8:
ec:97:4a:d7:79:26:34:ba:91:4a:d2:67:73:a5:e0:
33:e8:86:c7:86:58:84:51:d2:c5:90:dd:86:d9:3e:
ab:26:58:97:6e:4c:a4:50:40:0d:b7:95:b4:ed:20:
f5:87:0d:b9:d6:7a:ef:16:e5:94:cf:e3:9d:25:b4:
35:f1:08:f4:6f:f2:85:8b:ae:1e:16:18:b7:af:d9:
18:a6:8e:13:88:6f:53:a6:07:9a:52:61:c2:48:7c:
de:e3:eb:67:44:c9:f3:4a:ae:32:9a:d2:97:fa:61:
db:38:01:f3:30:bb:65:fd:04:d7:a1:61:53:75:89:
28:2f:da:12:d3:c2:f1:79:4a:7e:f4:96:46:b3:c1:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8D:9D:AD:C0:58:1D:27:D7:5F:B1:42:E7:CB:A1:3A:10:F1:60:4F
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:a7:05:8f:3f:8f:3c:90:a7:15:bc:38:ac:7f:2b:04:9e:
1d:d4:91:33:95:fa:8d:73:ca:dc:b1:70:cb:1b:83:ef:40:2b:
f8:e9:36:5c:06:c4:e9:f4:be:7b:6c:9c:30:3c:4e:d7:0c:6f:
be:24:e4:c2:22:37:7f:54:41:ad:67:97:a6:15:64:50:e2:43:
f5:db:30:92:f3:89:72:ac:d3:2d:11:98:cb:6e:1f:12:a7:72:
1d:31:7d:3e:5b:cd:a5:f1:6d:fb:21:71:de:a5:a1:43:ae:d7:
61:66:3d:2e:39:6e:24:fd:fa:ae:ed:2f:fe:ae:48:85:6c:02:
6d:1c:0e:7e:24:80:04:9c:ff:1e:2b:f8:9d:13:a3:3a:63:ca:
fe:4d:dd:8b:e9:7d:53:a1:8f:ef:a9:20:d9:2c:0d:75:e5:e2:
b5:ca:7c:f7:0d:d0:5f:29:cb:43:56:77:0c:64:af:21:a7:5c:
13:3a:63:88:2d:e1:2a:7e:b8:36:45:d0:f1:1f:09:10:e6:0d:
8f:a3:a9:3b:33:ff:83:6e:37:c3:62:af:3a:e7:40:08:28:80:
52:9d:b4:83:09:71:18:1f:e8:41:53:46:84:e5:3d:0e:ed:84:
6c:6d:2c:15:bb:d0:78:06:fd:77:8a:80:b8:ce:3a:61:87:1b:
80:de:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client