Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: pOTKPtHSmRbN5Fz+9+9q2FL24+4opisGDNeARLEyPFU=
Subject key identifier: CE:03:D1:E6:43:A1:82:7D:76:59:69:AD:DA:07:CF:3A:AC:31:81:80
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0194BC04F024FCA2F1DFA99ACDA14EFFFFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: +x8WtRE4Mgvys3oFgyyOquGGWP14pZFY7dVoQ0ysbI8=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:24:fc:a2:f1:df:a9:9a:cd:a1:4e:ff:ff:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=ce03d1e643a1827d765969adda07cf3aac318180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6c:77:91:d6:6e:93:6c:1d:0f:93:66:e0:6b:
cb:8c:bf:99:72:42:70:a1:4d:50:d3:76:48:a1:7e:
f6:cf:25:ae:44:16:b7:f2:32:e2:4a:c6:25:5b:6a:
6c:02:51:53:ca:e3:9c:03:00:44:04:14:0e:66:54:
15:a2:37:1d:e8:a7:76:8d:2c:cf:13:87:e6:42:ce:
f4:de:84:75:6a:8c:fb:80:14:9b:e3:ae:11:56:40:
9b:1b:66:18:3b:2a:c8:08:7b:f6:e3:0a:40:0c:b4:
a5:ca:12:83:fa:03:6e:81:6f:c6:ff:0f:18:ec:01:
99:18:af:2b:5e:19:a9:44:d3:8f:99:3d:26:1c:af:
f5:da:03:68:92:73:73:24:f6:5e:8a:fd:bc:29:01:
ef:bf:24:fc:3a:cd:4f:56:35:9c:7d:64:e9:16:cb:
97:ca:d4:c3:21:40:02:96:9c:5f:35:5e:0f:f6:ed:
e3:81:54:81:60:24:2c:b3:73:fe:01:13:f9:ae:a3:
bc:e6:77:7e:43:c7:b9:2b:1c:65:52:e3:65:53:8c:
4b:83:47:46:36:9a:b7:02:9f:07:78:1b:e8:d5:62:
ef:73:0f:90:a9:26:07:ee:e9:13:0a:94:40:53:50:
aa:9e:76:ba:8f:0b:f7:54:1e:77:bd:73:56:26:04:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:D1:E6:43:A1:82:7D:76:59:69:AD:DA:07:CF:3A:AC:31:81:80
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:98:e9:51:c4:be:3f:1d:b3:88:31:b4:9c:ab:a4:f3:67:92:
ac:60:8e:0f:76:e2:6a:39:04:48:5f:88:86:e1:d0:f5:18:82:
aa:e3:ce:24:e8:0e:d1:3a:28:eb:99:7d:d0:6a:4f:65:35:bd:
49:4a:4f:c1:49:a6:7c:fb:7a:9f:56:f3:65:fe:7e:05:bc:7b:
c9:c7:2a:d1:19:c9:8c:89:35:ad:d6:63:15:f2:25:ad:da:9f:
07:e6:95:d7:0a:08:a0:ea:97:8f:bb:2e:ca:3e:e5:0e:f2:95:
6a:ed:d6:87:3e:c0:2e:05:e5:26:d3:47:ba:ff:87:54:0e:c4:
e3:af:dc:81:5d:40:91:d6:ab:8c:c3:30:7b:6a:d5:0a:ef:bb:
95:07:bd:04:3b:d2:e5:c9:2a:63:b6:13:53:76:db:78:85:9c:
8b:49:2d:a0:75:a8:2e:e1:1b:19:67:6d:49:68:e6:1b:21:dd:
10:c0:6b:24:d2:cb:15:13:52:50:05:76:43:03:3c:98:02:13:
ee:c2:0e:dd:09:ea:dd:96:f9:55:97:dc:5b:dc:6d:21:b3:ad:
76:c1:b5:9c:cb:ec:af:65:ef:d1:a7:4a:c4:ac:8c:44:ed:25:
be:86:5b:4e:aa:97:22:92:1f:aa:da:0d:36:42:91:ea:2c:8f:
af:1c:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:41 2025 by rpki-client