Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: OyrhXgkJvvoLLC+BDdYysFsLVRolpKBYvwf3WKA5h94=
Subject key identifier: B8:81:50:B1:96:A9:D3:C6:DC:0B:B2:EA:8F:34:EF:AE:53:26:16:C4
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0194BCAA1FF7348D097F4A121F1DAE025020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: TovynlOO5xgK50qQuPzgA9XZ1rHtSBq+0NVLnWjEmUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:f7:34:8d:09:7f:4a:12:1f:1d:ae:02:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=b88150b196a9d3c6dc0bb2ea8f34efae532616c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:a8:ec:7e:5d:d9:7a:f5:bd:71:24:97:94:
80:c1:76:f2:f3:15:2a:c2:41:48:88:1a:ae:56:ff:
72:8a:33:bc:fd:5c:66:bf:b4:62:5f:33:06:aa:fa:
5b:92:64:70:23:9a:bb:59:91:7e:3e:fe:2b:4a:4b:
d0:43:6c:e1:d6:1c:7f:99:de:9d:3e:e1:50:4e:6a:
e4:ea:86:6d:87:9d:2a:27:0b:4e:e9:38:ac:95:c4:
c8:c5:1b:a9:d1:82:6b:9c:a5:c8:a2:f7:3d:ec:12:
84:62:8a:cf:ba:3d:54:30:97:83:e1:e6:9f:40:84:
1e:d6:e2:7f:19:00:ea:16:d1:f7:ea:b1:76:fa:93:
e7:f0:b6:2d:c2:73:e2:88:e4:80:5f:2e:ab:bb:c3:
75:2f:2f:ed:9f:dc:0d:34:c9:dc:f4:8a:cf:10:9c:
7b:2b:5b:96:48:bf:a6:50:b7:8d:34:7e:46:dd:24:
07:44:47:28:62:92:46:34:1f:8a:d7:0a:e0:c7:03:
03:c4:48:aa:40:73:1f:f9:47:70:51:f5:93:3a:ef:
f9:5f:7b:b9:09:ac:2a:bc:ca:d6:e2:0a:53:dd:be:
fa:e0:09:86:07:34:60:9f:52:c1:35:7a:0d:23:a5:
13:2d:38:06:05:94:81:eb:fc:64:92:d8:a0:36:96:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:81:50:B1:96:A9:D3:C6:DC:0B:B2:EA:8F:34:EF:AE:53:26:16:C4
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dd:1b:46:9b:80:f0:bf:98:db:64:a8:cb:29:14:73:ca:1f:
04:9d:e3:f7:b6:47:2d:90:f2:77:e7:09:56:89:46:4f:05:02:
9f:a3:6e:b3:bc:2d:e0:61:0d:97:73:87:64:02:82:bf:46:01:
89:68:2b:d6:7a:fc:6b:fc:af:28:7a:76:70:91:fb:9a:8b:cb:
c4:01:bc:81:2f:a1:2a:ce:21:85:8c:c7:82:cc:9c:89:62:14:
db:b3:32:e7:39:91:31:c0:7e:a4:bc:ad:1a:31:48:4c:ea:8e:
89:d9:38:3f:2b:6f:e5:6d:63:96:0d:e6:19:dc:30:6e:3d:69:
fa:b2:e5:fc:1d:5c:1a:f3:8e:29:e6:68:5a:3d:7b:97:67:41:
64:0d:94:2a:fc:6e:76:7f:96:54:88:b1:27:a9:a2:b1:3c:3d:
07:77:68:d7:e1:87:16:45:f2:3d:23:91:5e:36:f3:61:ed:cd:
37:7b:85:3f:6b:8a:0a:50:0e:ca:9b:50:73:ed:cf:c6:3d:0d:
e6:ad:d2:c8:5c:b1:12:37:58:2c:2c:89:a3:f9:44:bb:0a:7c:
c7:c4:91:79:ad:f7:84:a2:8c:75:b0:5b:8c:f4:94:4e:77:bf:
f8:cb:97:ba:d4:ff:85:10:3b:53:28:47:74:84:c0:f6:eb:ed:
b6:ef:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:34 2025 by rpki-client