Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: y85HtjrhkJjPEkGUN5bl3NJMFC/n3jf7h4lG8CMhOU8=
Subject key identifier: 58:E2:DB:8E:5F:6F:9F:C0:8F:4F:4E:E3:A8:5B:2E:50:78:3E:81:4A
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0194BCA9D6501D6633AC025DC34F4651C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 10FD
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: giK4+FwvWGD6g31YGX065xf9iFDIfFesfBrBt89HaMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:50:1d:66:33:ac:02:5d:c3:4f:46:51:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=58e2db8e5f6f9fc08f4f4ee3a85b2e50783e814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:26:14:9a:0e:de:f1:02:a6:c6:27:46:58:
df:f5:e4:7a:b9:11:f9:9a:df:3d:6a:11:d0:74:33:
a1:b5:68:35:34:4b:27:de:38:4d:d3:eb:57:d9:88:
70:d0:b7:a7:6a:ea:47:62:1d:dc:52:ec:07:a1:20:
49:69:38:cf:cc:f0:64:33:b6:0a:d0:db:61:44:76:
3c:2d:ea:07:23:4b:3f:22:f8:5b:54:26:43:a9:b4:
48:a9:ae:85:0c:4d:82:c6:5c:51:66:09:07:1b:3d:
73:f4:92:d7:16:45:f1:9a:8b:50:a9:1f:ab:51:68:
37:b5:2c:a7:23:28:dc:31:a2:c0:4d:7a:a6:21:cc:
77:4f:8d:e4:8a:fd:27:e7:f1:a6:20:94:92:9c:35:
5e:51:a5:ad:da:31:a8:80:46:db:52:92:9e:5f:3a:
10:ab:e4:cd:49:36:2f:4b:da:aa:ab:55:7a:02:7f:
c3:2e:d0:65:4f:38:de:84:91:80:7d:a9:eb:11:60:
b5:87:39:20:a0:51:6c:09:95:b3:e7:9d:56:d7:00:
a6:72:88:94:96:95:84:69:fc:d7:89:c4:24:97:f0:
ce:fc:c0:46:8c:3f:89:9a:08:38:16:44:a7:a3:9d:
6d:4a:ac:d8:27:c5:95:36:c7:c5:8c:0f:99:2d:ba:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:DB:8E:5F:6F:9F:C0:8F:4F:4E:E3:A8:5B:2E:50:78:3E:81:4A
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:27:70:5f:ae:29:d4:0d:00:5a:4f:3e:d1:08:e5:9f:1f:
99:f0:bc:7e:ca:ad:2b:35:de:4f:d9:5a:fe:69:ce:3b:1f:89:
8f:00:b8:8b:40:b4:63:d9:5e:76:bc:fb:f7:19:1d:c8:03:40:
6d:71:98:df:8f:6f:bf:6d:b9:27:a4:9d:cd:af:48:a5:f2:3f:
e3:80:3d:4c:05:35:9f:29:00:e8:32:86:86:61:ec:82:b0:d2:
a7:6d:f1:94:33:5e:5d:9d:10:c0:fe:a1:1f:e8:d4:8a:46:39:
c6:c6:ac:67:69:9e:20:ee:45:84:e7:d1:0e:3b:7d:03:c9:0a:
b9:79:68:ef:5b:55:9e:da:0c:24:d0:b9:df:65:c9:90:1d:05:
d5:b8:e7:46:b0:c1:c6:db:cd:f3:71:85:f0:c4:12:59:55:3b:
1a:50:b0:f1:27:b0:fd:7c:aa:2c:ec:a3:b8:3f:32:de:64:a4:
57:6c:10:4a:13:84:6e:0f:13:0d:48:cd:2b:42:0a:f5:ab:7c:
cf:19:58:97:db:62:86:ec:f6:e7:6d:ad:b2:d8:22:f5:29:20:
c1:97:44:94:d0:c8:4f:cf:04:2a:05:47:88:2d:12:93:f6:9a:
44:82:45:df:6d:3e:30:d1:19:ac:b2:ee:e1:f4:33:0f:ce:a3:
ec:53:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:45 2025 by rpki-client