Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: x16idFldNUFokEs9+tbzNWqIq+JdlGyJsS4S7KS/qAI=
Subject key identifier: AA:23:69:6E:D8:FE:2C:11:CB:10:18:36:B5:6E:F2:EE:E6:8B:1A:92
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 0194BD4EC476C56C9EEB358A88679B777585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0B20
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: MaHhodbo0DEcr0tsQfE4vfAqszVRqNXF5HrP0R89NBk=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:76:c5:6c:9e:eb:35:8a:88:67:9b:77:75:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=aa23696ed8fe2c11cb101836b56ef2eee68b1a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:a5:a1:a9:ca:a1:db:e5:55:4d:62:3d:ea:
fd:22:36:da:d9:30:6f:a9:1e:ed:aa:73:f3:cd:d7:
22:c1:83:2c:89:e2:f9:ff:0f:66:00:cb:b0:3b:a3:
5d:ba:8d:04:5e:fe:78:c0:c7:b8:52:89:f6:01:62:
cf:96:7c:99:e7:08:1c:fe:fc:72:6b:0a:6f:82:61:
2c:18:b6:0b:79:90:d7:76:3e:6b:87:1e:9d:25:d3:
2c:2d:dd:1a:37:21:14:3d:63:7a:a4:a2:fd:db:d7:
32:44:04:b7:a7:17:1a:f5:da:4c:5d:5d:58:49:9c:
e4:c6:d0:d7:e5:39:0f:29:06:90:84:b4:b6:6c:3f:
88:32:e0:2c:3c:13:eb:9c:0b:7d:1c:78:2f:0d:85:
a3:0a:b9:08:82:81:f5:fc:7c:3c:0f:51:e9:d8:9b:
5c:e6:63:80:16:98:66:9a:8d:68:03:e7:8a:14:47:
88:d8:39:ff:ae:8a:8b:e8:a6:8c:60:76:3a:28:fd:
a9:e4:23:85:50:38:15:44:c3:5d:1c:3f:6b:59:8d:
17:2b:2b:c9:5f:f1:5d:1c:9e:43:cf:86:14:d3:4a:
71:ad:97:30:da:35:7b:69:e9:41:f3:d6:89:69:d2:
94:2e:2b:97:2b:25:fc:70:08:8c:72:3a:08:40:6f:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:69:6E:D8:FE:2C:11:CB:10:18:36:B5:6E:F2:EE:E6:8B:1A:92
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8c:f1:db:99:ee:ca:a3:9a:96:f8:9e:0d:11:d7:08:d9:df:
b6:bb:a2:1a:4c:7d:6d:36:94:bc:ef:ad:e1:a0:d5:21:36:b7:
cd:e6:1c:37:e7:21:4f:e8:29:26:03:23:6a:24:26:92:d8:82:
b8:06:b7:e1:b6:6f:e7:4a:52:2d:a7:61:db:ca:4c:86:65:a3:
96:1c:a6:7b:7c:c0:7b:7d:1e:ba:c2:39:21:99:15:f1:b9:ca:
50:74:37:da:d8:ba:ee:59:02:1d:b4:63:43:bf:46:b6:59:d6:
19:8a:80:ea:ae:f4:d6:94:84:d1:44:38:23:c2:42:47:ac:05:
ee:63:3d:e4:f4:5e:f2:76:6b:e0:2d:32:45:18:7b:1d:f8:15:
eb:28:70:bb:f1:d8:56:80:4e:dd:61:1f:6c:73:b6:77:92:8b:
88:c7:06:09:6b:76:d3:a9:c2:d6:67:3b:d9:2c:e0:1c:f8:b1:
e2:8e:d6:b6:0f:fb:1e:ed:58:66:44:e2:31:5a:4f:46:b5:cf:
60:f0:7d:f1:0e:c3:07:cd:29:84:1c:fa:29:b9:fe:e7:c8:4d:
82:e7:ec:7d:91:58:e6:2d:ae:df:66:a8:fd:3d:27:05:94:c8:
9e:77:34:1e:7e:84:1d:95:2a:e7:1c:73:89:d1:d7:dd:43:79:
b2:38:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:32 2025 by rpki-client