Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier: p4JQ0doLFU2/l2PNXGQTRT0lnYg7CbL8HVQ8H9rH2Uk=
Subject key identifier: 5C:58:06:27:E8:21:95:EA:A8:C6:4E:4D:8A:03:43:C5:B7:D7:FF:E8
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 0194BCE0E93E7C5C45F16C8A90B9D9E0DD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: YJS6P5ddXcRHswXD5R1vZkbaB5mOZCf47vcgV1N2rSE=)
2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e9:3e:7c:5c:45:f1:6c:8a:90:b9:d9:e0:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=5c580627e82195eaa8c64e4d8a0343c5b7d7ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:63:6e:2f:b5:16:66:ba:fa:cd:b9:fe:83:
94:cf:fb:10:23:52:07:9d:73:aa:86:4b:8a:c2:d8:
e9:51:48:35:f4:ea:8d:f9:f0:f5:3c:c9:29:89:7d:
2d:89:71:41:4d:87:63:66:ba:c3:f7:b5:3d:23:53:
44:03:a9:b3:98:b5:f7:1e:75:50:e9:ad:e2:54:50:
a0:24:37:b2:cf:f6:9f:0e:1e:27:93:50:f4:5a:0c:
5d:14:9c:d2:9b:a3:0a:fe:8f:06:a6:dd:58:94:a6:
8c:f1:8d:28:eb:20:b2:d9:e3:78:bc:12:ae:56:e0:
6c:51:10:a7:9d:6a:27:d9:5e:50:ec:b9:7b:3a:fc:
b7:00:35:cc:9c:b0:c0:6e:e0:b6:e8:c7:70:bc:24:
f4:fb:d7:de:c3:ed:5e:48:a0:5b:14:9c:36:ad:6a:
84:7e:32:63:a7:24:d7:9b:f1:54:f4:65:be:e8:9d:
c3:41:83:ad:d9:30:7e:49:dd:f4:3b:07:8b:7b:49:
9a:15:7e:97:cc:36:ab:19:a6:13:92:0c:14:45:46:
af:fb:9e:48:5d:9a:c1:41:e8:20:2b:03:42:7c:d5:
69:69:57:cd:41:5b:a5:05:c2:c9:06:f7:33:ef:9c:
bb:c0:5f:c0:df:5b:3f:b9:cd:9f:16:2b:ca:d6:03:
aa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:06:27:E8:21:95:EA:A8:C6:4E:4D:8A:03:43:C5:B7:D7:FF:E8
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:80:7b:37:1e:ad:47:a6:30:f8:09:3a:dc:e1:53:30:16:71:
7e:97:6f:63:9e:65:f5:a0:30:7a:63:fd:bb:9a:97:cb:b7:ca:
93:c4:1c:ee:f4:9f:ee:fd:79:9a:4d:bb:ef:c4:77:72:a1:67:
60:fb:fd:a0:24:4b:13:bc:b6:cd:dd:34:10:0a:db:47:87:d5:
94:99:94:56:94:ea:e6:d7:62:ed:34:3c:32:f6:9a:ea:34:ad:
76:1a:30:e6:b8:d2:17:f4:1f:1f:ae:72:09:71:a7:24:f7:1e:
c4:ab:8a:47:f2:e1:62:ba:1c:9a:71:0b:ec:d1:1e:ad:64:69:
9c:1e:b9:fe:f2:ca:d6:78:80:4c:49:ad:0c:0b:3f:f4:ee:ce:
51:67:88:25:93:88:96:61:26:36:20:0a:15:89:7e:20:1b:bb:
44:89:3e:db:d8:6f:83:f1:95:ad:09:55:4a:d7:c2:32:61:e0:
51:80:04:64:bc:63:31:4e:12:7d:e0:68:e5:d4:36:8d:17:32:
29:88:1e:db:a4:46:4e:09:7a:b2:7d:a4:b4:42:98:76:68:ef:
4f:9b:7b:17:9c:d6:db:4b:14:f3:20:9f:45:b0:c5:0e:4b:72:
7f:3e:2d:65:29:c0:92:24:37:3a:ba:47:7b:a8:44:5f:20:90:
87:54:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:17 2025 by rpki-client