Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: OlIpcFTFmKgldwqP+RtG2XoRC+AW7C0yGDiNXbpzYS4=
Subject key identifier: 8E:73:F0:D2:3A:9D:1A:1D:D7:32:21:8A:F7:C3:3A:CA:10:C2:5A:E4
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 0194BBCDFB54C346F0EDAB3A4018D95918BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: LDiGPhMhdqp6M1gjtWaya3hr7kfVIfNj7t+u0MwUg2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:54:c3:46:f0:ed:ab:3a:40:18:d9:59:18:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=8e73f0d23a9d1a1dd732218af7c33aca10c25ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:4a:c9:67:26:66:70:87:34:77:90:61:8c:
89:8b:bd:a5:5f:24:8d:dc:05:60:8c:f9:f4:4a:5c:
13:61:dc:bc:98:98:70:b2:4e:d6:92:91:ab:16:fc:
be:7b:fb:e3:6c:a3:b9:f2:86:b5:6e:d1:b7:0e:2a:
50:a4:e0:6c:ab:3b:6b:7c:86:fd:d6:d2:0e:6f:2e:
b9:dc:d5:f8:0e:a0:44:05:28:dd:bb:d1:fe:84:12:
17:a4:c3:22:d5:3f:8e:2d:f9:41:ac:29:e4:0c:75:
7a:94:97:c6:46:0f:ab:a4:90:73:45:3e:78:10:67:
de:72:5e:10:95:0d:12:2a:ab:7f:5f:4a:d0:1b:4a:
4e:d8:04:9f:b3:1f:55:d5:50:7f:87:b6:1d:c4:6d:
40:e8:8f:a6:be:24:6b:1a:9a:bc:33:47:0a:8e:9c:
df:57:b4:0c:2a:33:86:ac:cb:f1:4d:b4:42:10:94:
15:73:07:01:d4:70:e9:ba:e1:91:1a:2f:04:04:5b:
9e:9d:89:24:9e:cb:a3:34:ab:c2:28:6a:f2:a0:6c:
72:09:35:41:5d:a0:94:ad:01:17:21:71:cc:c7:11:
ac:9f:a4:36:92:d4:2b:70:6b:f7:c3:36:1b:3d:51:
e2:8c:c5:2d:41:1d:e9:e6:8a:17:24:7a:a6:47:00:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:F0:D2:3A:9D:1A:1D:D7:32:21:8A:F7:C3:3A:CA:10:C2:5A:E4
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:35:bc:04:99:03:02:54:54:e8:0e:0d:7a:fb:2b:8f:44:34:
48:7d:d7:b7:86:59:41:4b:b2:4a:ff:8d:46:a8:bf:dc:58:4a:
1c:f3:93:b6:70:b4:ee:2a:65:ab:bf:7d:15:be:4f:94:07:04:
25:09:0e:4c:aa:20:36:cf:0b:4e:bf:aa:5b:b7:9f:81:59:76:
2e:5b:e3:06:3e:90:94:e3:ee:07:47:fc:aa:27:a8:66:17:ef:
d2:94:ee:4c:69:8d:a1:90:e6:ee:69:81:14:ab:c9:85:00:6b:
7c:b2:30:92:7d:9f:ae:8e:da:64:b4:a2:b6:7e:08:62:cf:ae:
f3:e3:0e:3d:a7:90:09:27:49:7a:75:9b:89:cb:33:fa:a5:0b:
9b:83:a2:de:38:ce:3e:a7:b0:7b:c0:63:f2:73:78:b4:eb:08:
6f:3d:18:0f:ca:96:54:e5:56:14:ac:9b:17:c2:45:b9:36:ea:
ee:ca:3a:d3:d5:73:2a:0b:40:35:d8:00:b8:86:3e:33:b1:55:
9f:7a:45:fc:14:e5:0a:29:14:6c:37:4b:8f:13:ac:f9:76:bc:
a3:02:e6:f9:19:a1:e1:d5:56:09:28:a3:2a:a2:fa:c0:d5:45:
9c:01:2e:fa:ed:13:54:40:a2:6f:1e:0b:05:c3:76:8a:a8:64:
40:48:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:43 2025 by rpki-client