Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: 1Rp+lFs5cD54J3rMu4BIKu2xyh4x4yaFu5g0IQ+e9OY=
Subject key identifier: 6A:90:AE:AA:AC:03:AC:A9:72:F3:0D:8B:CF:E3:EE:63:17:55:C4:EF
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0194BD4EAD8E497D475ECDC4572769A9356C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: 7Qq/ir4JSNtXSosKK+sWgac1Ru1iXN0UEwsEVjjEroI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:8e:49:7d:47:5e:cd:c4:57:27:69:a9:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=6a90aeaaac03aca972f30d8bcfe3ee631755c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:a6:8a:cf:10:f8:ec:5c:30:0a:97:28:e7:
9b:0d:12:d7:1c:9f:eb:c4:68:95:8e:da:3c:a4:a4:
e5:ae:8a:c0:ea:3a:f6:bf:06:88:c2:27:fd:77:b5:
41:03:e6:2e:34:fb:71:9d:c9:05:56:dd:fc:e8:fb:
3e:40:98:89:64:12:c9:0a:6b:ac:fc:43:05:73:35:
57:d2:53:06:88:c2:63:75:05:f7:c4:1c:62:18:cb:
29:4d:88:7e:df:dc:a5:ed:7b:3e:c3:36:eb:36:ea:
40:3d:f5:1c:cf:c1:dd:ad:c0:2b:cf:7e:92:54:fa:
6b:92:ae:13:8e:56:cd:58:5f:9d:f4:a6:d2:0a:9d:
5e:51:aa:21:1e:e9:e3:b5:86:9c:8c:a0:b8:45:38:
93:73:b1:ff:89:a3:36:7c:f2:ea:97:66:7a:1e:14:
78:fb:95:ee:ac:fb:b5:0d:c6:2e:39:85:9c:fb:ac:
13:26:ab:2c:5a:80:33:b4:b2:b4:92:b7:51:2a:38:
c3:a8:08:09:4e:b4:c4:4d:ac:8a:f5:65:6a:77:7f:
88:05:af:d9:de:0d:50:c9:15:d0:48:90:ea:34:f1:
b5:28:c2:5f:fb:a7:cb:df:83:c2:7d:cf:34:6a:40:
cf:04:60:12:f5:35:b1:8c:3a:52:26:39:33:78:e4:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:AE:AA:AC:03:AC:A9:72:F3:0D:8B:CF:E3:EE:63:17:55:C4:EF
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:cb:7d:3b:1e:1b:3b:cf:99:e9:72:f2:cf:55:ad:a6:e4:
2e:a2:72:88:b3:f4:b6:b1:bc:d7:39:24:4c:3b:68:36:50:a9:
14:d8:f0:d8:36:d1:8f:67:f3:01:b6:e8:a1:0e:e9:74:6b:93:
d2:cf:96:de:5c:f7:b2:ff:f6:fe:58:a4:e7:73:9f:8c:6f:25:
fd:34:98:d9:66:14:16:9b:54:2f:0a:c6:2b:2b:f8:1a:80:4a:
d0:d9:33:c0:61:32:22:b0:9b:90:95:d8:6e:0f:ac:17:a7:7f:
6e:ba:87:63:be:49:af:3a:07:1e:4d:3e:b1:4d:a6:6f:16:79:
14:a9:c0:0f:bc:61:e6:49:8f:48:c0:d5:15:93:1c:02:19:99:
c4:09:c8:b9:02:84:d0:de:4a:48:61:f8:c4:93:0d:d0:7e:b0:
81:c1:18:67:ab:a9:a5:f6:59:21:fb:09:22:25:48:da:7a:32:
c6:d1:3c:f4:f2:0c:60:24:bc:70:08:4d:7c:8a:c6:a0:d2:d8:
93:f2:ba:dc:1a:21:4f:ad:8e:ee:88:4a:54:19:ca:a2:1c:f1:
7d:de:3e:3a:51:81:f4:16:6b:50:c8:38:de:80:ba:42:37:ef:
3a:a4:f7:dd:5d:9c:a3:c9:16:70:93:34:23:78:e9:c1:79:6a:
ba:18:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:34 2025 by rpki-client