Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: po5otjjK0Ga8E4njFYc6cw+Smb1ypuIbGAKMYe6biDQ=
Subject key identifier: 52:8C:78:A1:69:1B:CD:91:50:38:FB:55:87:DC:40:CD:32:9D:42:4B
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0194BCE06873F0CE9500E232ED7B138CBEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: xKvqjt13TJA8nslq/uT5SVxzcKaPbCSsLgAz9lk1RRg=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:73:f0:ce:95:00:e2:32:ed:7b:13:8c:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=528c78a1691bcd915038fb5587dc40cd329d424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:18:43:f8:c9:47:cb:6e:f5:c7:7c:72:8f:
ce:21:1f:47:c8:09:0d:bf:d4:a2:0e:f9:df:65:a0:
ff:b9:69:3d:cd:a5:03:e8:e1:1a:23:34:4a:0f:c0:
8f:9d:4e:d5:9f:d9:38:63:88:29:99:d5:ff:52:90:
97:b7:ef:c0:98:5c:bd:12:1b:7a:1c:d6:a7:39:70:
61:eb:e1:a6:83:b3:7c:47:1a:99:92:d7:1e:85:28:
af:81:2d:35:b1:45:df:55:c1:4b:9b:96:cb:df:a6:
87:ce:75:f8:2c:4e:b8:14:2f:3d:19:db:ba:0c:bc:
d6:6c:a4:e4:42:58:45:7c:69:c4:58:90:f3:31:bc:
2e:df:da:a3:fa:19:57:c1:d9:b7:e9:6c:f2:18:5d:
d4:09:1f:f3:92:7b:46:4b:a7:fb:f7:c9:08:65:92:
cf:a4:55:2f:f3:99:3a:7c:f0:65:44:d5:8f:b9:b4:
32:d6:dc:6f:4e:88:bb:f1:4c:79:8b:bf:12:b0:c9:
99:c4:f0:bf:ce:56:d2:9f:00:7c:ee:e2:33:90:f0:
70:63:f6:41:21:55:e4:90:d0:31:34:c5:b1:a0:0a:
d3:52:bf:87:11:68:a9:d5:68:23:b0:3d:f4:ea:a7:
81:7a:e3:5e:f1:b5:a5:a6:1d:d3:2c:95:c9:32:77:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:78:A1:69:1B:CD:91:50:38:FB:55:87:DC:40:CD:32:9D:42:4B
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:e0:95:92:05:84:ca:3c:db:af:b4:41:3b:a9:dc:7a:e2:
5b:56:33:6c:04:3b:79:4c:2c:e9:2c:42:ab:90:f5:97:5e:bc:
15:93:5a:6e:d7:98:6d:65:13:89:a8:92:86:26:f9:5d:b5:74:
62:c5:6e:33:11:50:a7:e3:5e:fe:50:ce:0e:37:e0:18:36:a9:
b7:73:8a:d4:48:bc:e1:e8:20:e0:ee:29:d2:14:19:e7:b9:9e:
98:b4:65:1f:7c:ee:1b:4e:1f:80:49:01:d0:cc:29:90:85:8e:
cd:d7:b9:f7:a4:a3:1e:73:a9:1d:05:91:69:72:a5:dc:6c:54:
00:4b:eb:7f:2d:54:31:c7:4b:1e:08:e5:0f:df:30:8d:86:3d:
19:7a:15:1a:5e:1a:ac:90:07:b9:9f:71:ce:72:ab:2a:44:26:
18:47:a0:57:3c:f7:03:e5:a5:ee:17:11:72:7a:cc:42:86:65:
d9:cb:15:58:c1:66:ac:fb:80:23:f0:71:59:db:d6:bc:11:ad:
fc:17:b1:d9:39:67:f3:9d:d4:e1:a4:57:ac:e2:8a:d2:76:08:
c7:85:b0:66:e6:71:a6:eb:94:1e:cc:e5:29:63:be:40:5b:97:
a0:36:dd:4b:df:50:ca:92:39:1c:f0:53:27:11:34:d1:c6:e1:
9f:a9:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:49 2025 by rpki-client