Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: owmvZNxVN99xhONXFioa1lp760Bt4x7J8ANRx7HEv4E=
Subject key identifier: C7:B5:A1:50:B5:BF:BA:A5:0F:3C:1E:13:D2:34:76:1B:48:C9:D0:12
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0194BCA99E0CC8D5ACEEDAE3A6B2D9D79F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0469
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: IJIREiYGDec6keDu3cFJ5YrWZbjp8vJGmugLpcdeQsA=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:0c:c8:d5:ac:ee:da:e3:a6:b2:d9:d7:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=c7b5a150b5bfbaa50f3c1e13d234761b48c9d012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:c7:35:5d:a2:35:b1:a4:25:24:31:9e:db:
ec:97:d8:d8:a3:46:57:48:e5:21:18:37:23:99:57:
ab:22:39:4b:7d:46:a4:ef:30:83:ae:94:b0:e9:2f:
26:16:dd:af:f3:95:4c:c3:5e:91:20:18:fa:4e:19:
12:b5:76:1d:dd:59:cb:a5:7e:52:b4:1e:54:5f:98:
c5:6a:cb:25:5a:27:56:de:60:5e:a1:84:1e:a6:fb:
96:95:e9:1d:01:54:ef:11:55:bd:ee:11:b6:dc:6b:
d0:72:56:c5:bc:ab:82:e9:60:c3:08:fd:18:14:3b:
5f:7f:7d:ac:3e:c2:35:d9:a2:e4:2e:ee:48:00:fa:
9a:6d:a9:19:24:08:a3:17:7c:f1:d1:70:57:ec:8e:
9f:83:6a:6b:a2:13:35:97:49:d0:1f:35:72:55:cd:
03:e5:97:e5:df:76:59:4f:c9:87:00:da:f3:e4:0a:
45:3c:c7:27:f7:c6:72:ca:82:3b:6e:0b:07:6b:67:
71:d7:97:4a:fd:d5:ea:6e:8c:4a:54:41:75:ff:c3:
72:f5:e4:57:8e:0c:31:88:0b:ac:9f:b6:32:4e:d4:
4e:46:f9:94:3c:a7:a5:d7:83:04:cc:73:0f:63:ad:
c1:8c:cc:2f:e9:3f:a1:f9:c1:50:2c:77:f9:fd:ae:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:A1:50:B5:BF:BA:A5:0F:3C:1E:13:D2:34:76:1B:48:C9:D0:12
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:63:ea:bd:9c:1b:21:75:75:c6:41:08:0f:23:7b:38:f8:18:
a6:f5:c2:a7:9a:cf:17:f1:93:c0:56:e6:9f:1c:bf:fd:d6:b5:
10:31:d5:10:5e:39:12:ac:c0:6b:6a:1c:3a:ba:74:67:97:cc:
ec:86:42:f8:6f:64:df:25:e9:15:0d:a5:ef:d5:02:0c:35:6f:
06:c6:40:71:af:92:c6:9e:4e:8b:ea:9f:a6:7e:44:a6:02:14:
bf:5c:af:47:8f:41:85:a2:40:6d:e4:52:84:14:e8:13:4c:78:
bd:b2:6a:2f:a6:95:38:25:37:ff:4c:bc:e7:34:e5:42:03:ec:
78:e3:e1:ef:84:1d:fe:2e:66:11:ea:9f:19:49:ee:d2:da:e1:
72:ca:53:21:ec:a7:4f:30:d2:fd:a8:b3:a6:6c:ae:70:07:f5:
c9:0c:e0:5d:0c:0d:21:37:fc:a9:7d:90:cf:2c:5c:ff:b4:e1:
5b:d5:8f:d3:60:63:da:17:67:db:02:29:ca:8f:04:ac:51:97:
c6:9e:e0:de:a6:1d:55:c1:72:12:06:17:67:81:ae:c9:3e:83:
ec:67:c7:2d:df:e7:83:5f:c8:8f:4f:59:9c:44:97:d4:97:a4:
38:fd:9f:2d:36:2c:fe:0e:da:e9:21:a0:85:15:68:28:38:3b:
7e:28:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:15 2025 by rpki-client