Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: DLqrfqQDJg5zG6rdbzpSXk8Btgq3ceXy7mLYvn/M/lI=
Subject key identifier: 5D:EA:91:03:65:4F:6A:30:0B:CC:E0:D4:6E:83:5C:63:A2:E2:23:C5
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 0194BC72FD60198BB175FC9A6F0929888966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 05E9
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: cQTXcRJqjUNjgzl8QXu/gFAz46WdMvHogU2O9eU2BPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:60:19:8b:b1:75:fc:9a:6f:09:29:88:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=5dea9103654f6a300bcce0d46e835c63a2e223c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:1c:d8:f1:f5:0c:f9:c7:e3:61:d0:19:0b:
62:5d:f6:c2:75:21:d8:0c:07:2a:24:44:ce:0d:29:
44:f2:39:57:a9:d3:bf:42:26:0f:6c:6e:bc:c5:97:
6a:d6:01:27:bf:5f:6a:63:cc:43:75:42:3c:2a:5a:
48:8f:44:e5:10:68:d9:fd:8c:90:fa:93:4f:3e:d6:
8b:69:af:8e:01:de:26:de:c8:97:92:f5:12:df:a8:
7f:9e:2e:84:86:1c:17:4d:e9:2e:dd:88:0d:3e:f6:
c9:34:56:d5:9f:cb:77:78:b1:07:f9:ca:5d:cd:b7:
9c:ad:db:d4:27:a2:4a:fd:60:fe:d0:14:74:cb:3d:
bb:a3:17:ee:52:98:be:52:3b:56:75:67:fd:49:f1:
65:c1:fb:07:7b:82:0b:ef:49:91:54:14:00:34:df:
fc:1d:87:37:e0:3f:cc:b0:31:2c:ff:dd:20:e3:1c:
ea:8c:12:4f:07:c7:14:15:63:57:4e:42:50:6f:03:
e2:57:3d:03:fe:3d:75:65:2a:ff:33:9d:bf:98:2b:
c9:e9:81:c3:93:b1:ca:c7:94:c0:eb:ab:08:a6:0c:
3c:41:5b:94:c0:05:8e:39:df:af:77:87:8d:f8:fa:
84:14:61:69:fd:3b:ba:ad:76:5d:36:c6:d2:8a:73:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:91:03:65:4F:6A:30:0B:CC:E0:D4:6E:83:5C:63:A2:E2:23:C5
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c4:c4:93:c1:f6:5b:57:f7:e3:67:1d:ee:86:39:1d:b0:c7:
72:59:87:95:07:e7:3d:84:36:f7:80:bb:02:7e:b6:0c:d4:6e:
a7:ac:fb:37:60:88:a6:fe:f1:71:a7:51:cf:01:f4:55:04:f9:
e2:bc:75:df:be:8c:4e:fc:03:80:83:03:dd:e6:99:90:83:76:
16:e9:73:e7:0a:b4:48:43:57:45:bd:8d:c3:81:e8:a7:a8:2f:
b4:4c:28:2e:19:02:e0:51:04:ea:23:bd:55:bd:0e:c1:32:b4:
7e:c2:c4:c3:a6:d3:cd:46:c3:b1:4e:3c:b2:5f:a2:ee:46:a6:
44:bb:a9:fb:03:10:3c:24:a7:e5:f8:3d:52:24:bf:b0:fb:69:
bd:fa:43:b5:59:2a:43:62:63:38:37:44:99:05:6b:46:a2:3c:
b5:e0:13:db:c9:54:6a:20:fd:04:39:8b:cc:bd:f2:52:c1:c8:
6f:e3:57:42:ec:b4:05:0f:3d:15:ed:0c:e9:30:15:a8:97:12:
23:4f:06:a8:56:e8:bb:f6:10:88:53:47:86:f4:b9:60:b0:fd:
51:a0:d3:53:e5:0f:a8:37:2b:75:6b:81:0e:45:15:8e:77:41:
d7:f5:c2:e4:e1:3c:35:c4:cc:75:65:4d:46:48:9b:98:aa:de:
8d:dc:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:58 2025 by rpki-client