Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: QWZA0lmBVb2AEFNbfH2+wPKi5SJW/NBlCDdSIQIbXLU=
Subject key identifier: 36:24:11:2F:46:E9:E6:31:33:6F:59:D2:26:E6:06:49:FE:9B:52:52
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0194BD4E8A1D97B2ED16007554B7184523BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 01BB
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: COz0yepi3CUxCIPwlJScD037yFWBekAJo8LnE/uJ+ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:1d:97:b2:ed:16:00:75:54:b7:18:45:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=3624112f46e9e631336f59d226e60649fe9b5252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:a7:32:d0:63:2a:fa:1b:10:4d:29:32:3e:
88:88:13:a6:eb:90:32:a1:ac:2d:32:9c:a0:c6:9d:
5c:6d:d5:8c:4b:7a:70:a7:ee:d7:03:b4:28:97:a6:
a4:0e:4a:0d:c4:c0:3a:d0:ac:01:58:eb:92:f6:d0:
62:33:7c:36:ca:43:18:01:d5:f3:32:c9:90:a0:72:
e6:c7:95:ce:e4:89:e3:01:5b:fd:33:58:2c:51:d7:
83:25:6a:f6:9d:f9:13:45:fc:f8:b7:94:f1:4f:16:
9c:1d:ae:ef:73:4d:3e:d3:11:b5:2a:5f:b7:f1:5d:
04:74:fc:c6:02:d1:8e:50:58:25:ac:b3:c6:da:5b:
70:ed:e2:d4:c3:3f:9a:e5:ee:72:28:fb:56:54:61:
24:40:4d:46:fd:61:1c:a5:45:11:5f:a4:9c:02:8d:
3c:68:a2:56:24:05:ea:c1:a3:9c:23:e7:01:f6:f9:
dc:ef:6c:71:68:a8:01:61:df:2a:ce:58:06:87:76:
87:4a:b4:65:fb:e5:d8:98:ce:6a:d7:ba:d5:62:ae:
95:cc:25:56:d6:e4:72:b5:ea:92:48:bd:8a:d8:c6:
c5:51:e0:f7:25:e8:01:01:c9:15:24:de:90:73:33:
7a:4c:e1:e5:c4:96:a8:90:5d:ed:31:c0:cd:74:40:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:11:2F:46:E9:E6:31:33:6F:59:D2:26:E6:06:49:FE:9B:52:52
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:bd:36:bb:52:d4:e6:e4:c2:36:4a:64:79:cd:51:52:1c:
73:e1:bd:13:0f:ce:4e:56:dd:59:89:6e:ec:bd:7e:f5:94:f2:
a0:ed:64:fa:f9:ab:a8:7b:65:f2:e9:9c:bf:b0:6b:ee:33:a3:
66:15:bc:0f:2c:02:bd:dc:01:75:56:0f:50:58:e5:20:b4:ce:
0b:13:a0:5c:03:d3:95:30:8f:fa:ea:eb:f5:15:74:69:99:31:
4c:4e:9b:a7:df:6e:0b:73:07:09:51:d0:15:1a:3f:ba:2d:2c:
9a:3e:f4:b2:c6:f1:72:5d:3b:c8:3f:c1:f2:02:69:15:56:3e:
aa:6e:40:f6:83:4c:5c:c3:80:31:c8:83:17:72:88:0f:59:a9:
95:bd:9d:7d:96:03:b1:ce:99:e3:d2:43:b4:d5:db:4b:b9:b1:
91:57:5a:f0:15:20:94:26:48:61:d0:49:d0:67:65:99:73:57:
2b:b3:0a:99:61:8a:c8:0f:3a:d8:36:15:c8:d3:7f:75:b6:0c:
bb:63:11:8e:4a:2b:71:61:77:4c:3e:96:8d:ad:ee:5c:77:37:
f3:d3:8d:a4:bf:8c:c3:e1:15:d0:1b:20:73:9f:31:9a:29:2c:
c8:5b:4f:d3:e0:1a:0a:77:2e:f7:00:eb:32:0f:ab:5b:26:3d:
32:8a:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:14 2025 by rpki-client