Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: h+nwT/tHNHR50/Inqrf+8xoU48Ol75xE9fdunwun1E8=
Subject key identifier: 15:C4:C8:64:A0:83:D5:D9:78:B7:9B:59:C4:06:7A:0E:16:7B:2C:9B
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 0194BD4EAEC98EAB42DCF88342C0CC3AAC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 103A
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: luOaSzfcBWODdwSmRgQ9eNUo+OJik74EBcGlu7Vn9yg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:c9:8e:ab:42:dc:f8:83:42:c0:cc:3a:ac:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=15c4c864a083d5d978b79b59c4067a0e167b2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:18:45:ba:23:b3:27:44:a6:68:73:01:7c:
a9:c5:e0:ed:6f:84:f7:0e:97:b6:f6:1d:41:4c:b7:
3b:5f:57:db:0e:4a:72:59:b3:21:43:eb:f9:d6:ac:
12:39:0d:70:43:2e:e2:3d:c9:78:8e:49:f8:00:45:
e4:f3:21:ce:41:47:bd:d9:b7:8a:d6:d2:97:b0:a4:
70:98:4d:7d:4d:83:4d:66:a6:b1:ef:e5:16:b6:81:
15:fe:fb:e0:96:1b:cc:c0:a8:bd:02:48:b7:78:9d:
64:62:c7:60:3b:22:9c:95:a6:af:61:c1:66:c3:59:
2c:05:38:92:d0:93:02:ee:f2:85:10:60:3e:d5:de:
e4:81:73:d4:1d:52:e1:82:f6:a4:8e:57:64:89:75:
17:1d:8d:45:1a:21:f6:31:0d:0d:32:2b:78:c9:20:
b7:70:a8:02:8a:cf:00:4e:3e:9c:76:4c:dd:3a:af:
ad:d5:a2:2d:38:57:6f:31:4f:65:54:fe:2a:9c:f6:
2e:c0:0b:56:d1:b9:f1:ee:63:41:fe:05:a0:37:48:
da:ca:07:f7:df:d4:af:bb:b7:5b:d3:0a:cf:13:5b:
68:ae:de:65:c0:24:58:a4:da:63:04:ac:28:68:88:
09:6a:78:44:43:a5:98:bc:96:d2:8a:e2:1a:6d:16:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:C8:64:A0:83:D5:D9:78:B7:9B:59:C4:06:7A:0E:16:7B:2C:9B
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:88:06:fa:6f:cf:85:7b:1d:4f:81:6e:87:e1:67:d8:ab:c4:
c4:94:7b:92:19:8a:9b:f5:55:b2:42:45:d9:40:72:68:15:cf:
cb:ae:c5:aa:4f:87:c7:af:f5:7e:91:11:e0:4d:cd:e9:ec:d8:
02:18:87:ab:48:4d:7b:2d:6f:81:6d:74:5f:1f:84:35:2b:a8:
22:be:d0:6c:06:5e:5a:99:db:73:b6:75:6f:c2:f9:b1:8f:95:
2f:06:db:03:b5:55:81:1f:bc:76:b8:4b:00:dc:b8:60:c5:5e:
32:cb:5a:f3:9e:62:d0:87:7b:09:cb:2e:98:95:6c:d9:f4:b3:
fc:4c:96:2b:89:36:97:37:af:ee:64:8e:86:df:4e:96:9e:4e:
a3:fa:c0:ba:99:15:60:c2:64:5f:59:c7:7a:e7:a5:43:16:90:
47:b0:14:0b:e7:db:7d:68:23:e3:02:cf:f2:a8:bd:a2:ff:49:
8d:82:4e:bf:71:45:d7:42:55:20:b0:2e:17:17:1b:4d:f1:dc:
c3:03:0b:4b:9e:54:12:b9:0d:36:92:40:b0:29:d1:39:03:6d:
4b:15:96:62:2f:01:cc:bf:1f:dd:7d:70:3c:c1:cd:18:50:7c:
68:01:70:50:08:a9:3f:64:eb:7e:b1:2e:5e:98:0d:be:73:68:
83:13:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client