Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: NWmg/1/AbhwPiI/c14OXdOKUBHqS23rkP5bb0Pd2Kn8=
Subject key identifier: A8:0E:8C:5E:29:09:EA:35:BF:08:C6:BA:77:9B:36:7D:EB:4E:32:64
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 0194BC3C95482998D668B698B1E85A1B76D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 128A
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: wDqj6dzxdJsAd6/veLZZoqP8OsZhY/IqFs7p8eWjIms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:95:48:29:98:d6:68:b6:98:b1:e8:5a:1b:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=a80e8c5e2909ea35bf08c6ba779b367deb4e3264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:49:f6:37:5a:93:b6:ea:df:f0:18:65:4a:
a1:d9:fd:dc:ab:3f:c8:d8:76:25:7e:93:1b:12:61:
fd:1a:86:c9:e0:b1:46:fd:84:cd:58:25:11:73:cd:
94:8f:5c:86:e9:66:c6:69:f1:d5:d1:66:fc:b7:9a:
36:92:e0:1b:4a:2f:af:3a:5d:38:65:eb:00:20:41:
7c:dd:4d:f4:d6:7a:67:3c:89:cd:6b:8e:69:0f:f9:
49:fe:db:13:06:6b:ec:65:b8:6f:a4:bd:b9:ee:5a:
58:5b:2e:ea:70:9d:b9:85:15:e2:25:ad:4f:6e:8a:
19:3b:92:9c:02:d8:e4:e1:18:83:3a:8d:a2:ca:d6:
2e:35:98:e8:fc:7c:f0:8f:fb:cc:b3:84:b2:41:a5:
84:a7:88:4d:f8:90:d3:ea:f3:c7:00:fb:03:58:ec:
d4:bd:94:00:57:67:90:f7:1e:f4:19:1d:98:4e:23:
90:9f:56:73:4f:6a:6e:4c:b4:9c:a1:6a:f5:44:00:
65:5e:d0:9c:51:b9:27:9b:2c:d7:a7:3a:f2:c3:62:
4c:54:5d:8e:30:a4:35:7b:fb:8e:fb:cc:3d:a8:10:
c8:c1:99:59:df:43:6a:cb:96:69:1b:68:95:a5:97:
d8:5d:ff:db:e4:5d:2b:2e:33:10:04:13:75:75:01:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:8C:5E:29:09:EA:35:BF:08:C6:BA:77:9B:36:7D:EB:4E:32:64
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:45:c0:35:a3:fe:80:24:df:21:41:15:7e:10:27:84:aa:d6:
23:de:19:5e:e4:0c:da:0f:fc:10:08:d2:2e:91:28:2c:3d:60:
3d:85:03:c4:55:57:43:7c:68:f5:6e:74:f5:1e:a6:4c:e6:e3:
fd:83:ac:a8:d4:4b:b3:8d:0a:d0:17:b5:87:a0:60:60:9c:46:
0e:5b:67:dd:ec:64:d9:0a:46:73:b1:49:50:da:4c:8e:19:7a:
52:a4:98:35:5c:db:8e:ee:0d:c6:ba:dd:f4:f7:01:53:16:71:
4e:88:db:1e:bf:38:b4:3d:3f:c1:4c:61:1c:1d:1b:92:2f:c2:
55:e9:24:a5:5b:cb:44:5f:12:18:ea:72:b7:26:48:39:1a:bd:
3f:75:5e:d2:1a:84:df:a1:70:04:15:f2:78:bd:82:41:50:f7:
3b:f6:b4:65:65:fa:80:07:18:e0:e9:ae:60:d2:ee:e1:99:75:
1a:fc:89:0f:fe:a2:a4:81:0e:e7:7b:bf:ee:c6:0f:06:18:45:
ee:f3:f4:c4:ba:71:bb:c7:d8:1b:57:30:53:7f:56:02:42:63:
a8:09:8a:5f:4f:b4:d7:8e:19:67:e3:4c:67:2c:34:5e:fe:28:
a8:6c:b6:d8:53:98:d5:6c:52:14:b1:7a:68:35:c6:7a:56:ba:
1f:01:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:54 2025 by rpki-client