Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier: mRbFN4Q9iDMmDRlZi+WMi/iIXQMAvSMR0xugSBhHp3k=
Subject key identifier: 46:A3:44:F1:5F:95:22:BF:D2:41:99:9C:C7:BA:D0:29:BE:6B:5E:7A
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 0194BC04DF016128D90EF62E3D1C4D28107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: E0yopnRQgLGLHdV1o6RB02TI2cYgxWovjFNFoksmyUs=)
2: rFCa92sZ57rbSlpDFnJkYc6lQas.roa (hash: F4iKR691e2AK34cFxmtOhRMANb+mE4me/fLCv0E4c8M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:01:61:28:d9:0e:f6:2e:3d:1c:4d:28:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=46a344f15f9522bfd241999cc7bad029be6b5e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:5c:cd:7e:17:6e:0f:bd:54:13:fa:6b:5d:
9c:f9:16:2c:24:46:b3:ac:fb:a5:a1:56:6e:23:37:
25:a6:ba:3d:66:6c:45:c8:5a:9f:f3:91:83:6d:3a:
2d:96:b1:20:73:9f:d0:ce:d7:54:60:f8:30:27:89:
cd:bc:70:88:1c:0d:2d:f2:0e:cd:d6:6d:ba:fe:91:
73:7a:26:16:db:26:ec:0b:f2:78:45:39:a1:89:84:
a5:c9:fc:12:86:c6:b2:22:42:18:c1:bc:a6:9b:15:
a2:b3:1c:32:25:9c:f4:28:62:6e:e8:33:8a:24:80:
24:c6:07:44:90:96:79:7b:7e:10:d9:fb:b3:aa:c8:
f5:38:44:91:69:05:32:a9:9b:d7:6b:ef:bc:4b:62:
d6:18:23:e9:69:e4:a1:3a:f5:fb:fd:0e:b8:a5:b6:
de:12:fb:d7:3b:17:0a:4f:e0:78:1d:fb:ba:39:ba:
a7:ac:41:9c:47:79:e8:3b:ed:8c:b9:1f:c2:fd:c9:
41:a6:79:a6:b0:0f:33:f2:8f:7a:4b:de:21:3c:bf:
c7:10:33:0b:40:5a:1d:6b:98:c6:f6:d4:7a:77:99:
d0:f0:c0:55:c2:2d:26:3e:dd:5e:c4:64:ac:d7:48:
70:73:b8:3d:28:62:69:2a:9c:0c:07:57:2c:53:1c:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:44:F1:5F:95:22:BF:D2:41:99:9C:C7:BA:D0:29:BE:6B:5E:7A
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8d:30:25:59:6b:29:83:90:0c:d1:d4:ef:0a:1a:26:7c:d2:
e6:6b:22:e8:bd:47:43:1b:28:4f:87:a8:a8:b4:ab:96:70:ab:
11:35:32:11:30:11:dd:0a:f0:ac:9b:00:c9:86:74:41:08:30:
af:0a:53:09:ab:f1:da:89:1c:aa:1a:fd:fc:82:75:bf:87:30:
b5:6f:8f:24:e4:1b:27:7a:2c:48:55:f3:48:76:ff:07:fe:62:
6c:34:50:08:f4:b4:51:2a:8e:10:c6:e8:75:2e:73:22:46:a8:
bf:0c:76:ec:2a:b7:ed:15:b8:c8:79:65:78:e3:5d:72:7c:65:
12:f6:ef:a6:ab:f9:30:64:29:8e:11:5b:cc:ca:f4:6f:19:e4:
7a:a6:15:25:e9:3d:d5:52:5d:97:fb:f7:80:a6:53:ee:8c:7a:
0c:f1:00:c7:2c:e1:9e:8e:a4:16:77:92:4b:c3:1b:4e:89:51:
2d:91:fd:20:c5:d3:e7:6e:bc:27:a1:91:b6:99:a1:3c:a5:7d:
35:08:32:17:f1:84:22:ca:f8:cc:e9:e5:f4:c7:36:27:15:87:
2c:cc:ac:eb:55:f1:36:59:cb:09:7e:b6:4b:0c:37:72:1d:0a:
b3:c9:fc:d5:71:b7:5b:3d:07:65:81:19:6d:77:33:71:81:7b:
17:09:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:24 2025 by rpki-client