Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json)
Hash identifier: 6Y4U4trNYyVO9WU8zK0hNASz2JETd/1KGqGP8TX86sg=
Subject key identifier: 3E:82:1E:F6:E9:F0:3E:84:15:F9:03:1B:F3:FA:DB:B7:5B:C1:F3:D2
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0194BC3C903D3E65D0A45023E01BEDFD34CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
Manifest number: 110E
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: 4l7qZgaWet5ccLlKIvlNjGBmoJXvGsbT3GbT+n7so0k=)
2: zyiztbQNQv6y6x6xB8WDnbL7mKs.roa (hash: pm+2FQpk1g4xYfZeUbM3WBneY3Wj8QxHI62z6yoU4dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:3d:3e:65:d0:a4:50:23:e0:1b:ed:fd:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=3e821ef6e9f03e8415f9031bf3fadbb75bc1f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b7:8c:3e:fe:24:73:06:f2:ae:83:bb:cd:
b8:60:c6:e6:63:4f:8e:0f:fa:2c:24:ca:32:ad:d9:
02:16:1b:5d:2b:58:0f:1c:08:80:14:34:32:f1:47:
8a:11:20:cc:8b:e9:c1:33:ae:49:e5:be:2c:6e:33:
c3:93:08:48:96:71:f6:e5:1a:c6:5e:23:07:60:60:
8c:d4:64:79:c1:69:de:c5:72:93:72:0b:70:39:53:
96:9e:77:0e:59:6c:0c:ac:7f:f5:56:36:d1:53:ab:
8a:c5:ce:84:48:b0:cc:cb:80:4c:64:65:70:a1:18:
b9:ab:c7:d7:ca:58:fc:c3:4d:18:6a:20:a1:90:26:
04:39:c2:3a:d1:90:1b:e8:b3:17:f5:0a:c5:0f:27:
ed:02:b9:18:9c:bc:72:fd:d2:8a:02:b3:78:73:86:
46:6d:24:d3:fb:6d:94:df:f8:03:6c:c3:fc:e6:82:
5e:b0:96:7f:7a:3e:3f:18:7c:1a:0f:19:2c:6f:57:
79:1c:88:85:03:2a:cf:fa:f6:ee:e9:19:7e:5e:cd:
c2:c4:9b:00:ba:1b:e3:d8:39:76:2d:74:1f:80:38:
6e:3d:a5:f4:0f:6d:54:9b:ca:6b:5e:55:3f:27:fb:
96:b0:a1:20:d4:bb:48:7b:1c:06:a9:06:6a:3e:41:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:1E:F6:E9:F0:3E:84:15:F9:03:1B:F3:FA:DB:B7:5B:C1:F3:D2
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ad:85:13:1d:0a:85:da:81:30:be:56:ee:cf:ff:05:2a:e7:
25:60:46:5b:f1:12:d6:3c:02:e2:f9:19:9f:3d:d9:6f:6b:97:
6e:f4:b9:f4:87:84:f5:1e:64:13:fc:c8:df:c7:0b:cd:d1:8d:
fb:74:cf:91:be:73:1d:6c:5b:0a:82:c9:bb:73:ce:2b:b2:04:
c6:e2:16:f1:a5:32:c0:4c:48:55:a5:b2:1d:e5:24:c5:51:90:
89:51:d6:26:65:94:9c:99:f5:7b:06:17:b0:33:33:57:ef:b0:
ce:a9:12:48:6f:59:a6:a9:69:c6:96:f2:47:0f:8c:54:48:03:
e0:ea:e0:46:13:09:2f:03:c4:97:d8:b1:b2:aa:5e:f5:7e:85:
8d:a9:2f:00:47:9f:6e:1b:4e:4e:db:61:83:bb:ff:50:f6:da:
54:04:61:26:0d:6f:78:78:e0:c8:b8:25:25:79:6d:a9:26:cc:
3b:ee:b6:90:4e:83:32:8e:54:30:95:c5:94:70:9a:1b:f1:81:
89:20:2e:c2:6f:91:90:8f:1d:34:20:1f:02:b4:43:64:32:2e:
99:d2:79:51:0c:ed:e7:c6:eb:e4:41:55:c5:d0:dd:07:c9:3b:
1b:86:1e:db:ca:6b:af:73:b1:e3:d0:23:cc:94:10:e7:b2:91:
9c:db:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:20 2025 by rpki-client