Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: 99rYqFvFQWwee1gPF92dvDlABSnRyvnBGrlB58wZjYU=
Subject key identifier: D4:D8:6B:C8:7C:F7:FC:4B:03:A0:03:BB:19:DF:FF:18:DE:CC:D5:AB
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0194BD4EB41CF956509ACD0CEEC9B4BA77C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0DD7
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: PLdROVtQCbKvj5HMogjU33bWc7T9QpQc6FZuAQLqd0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:1c:f9:56:50:9a:cd:0c:ee:c9:b4:ba:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=d4d86bc87cf7fc4b03a003bb19dfff18deccd5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:cf:13:2e:fa:0f:aa:a9:9e:a2:7e:5c:a9:
ce:ee:04:cf:ec:89:b2:82:75:b8:6d:82:cd:86:a2:
49:a2:86:bf:80:b6:a6:96:47:71:0a:fd:c6:63:78:
cc:7f:c8:21:21:54:e2:9e:8b:6e:d4:6e:5d:d2:32:
fd:a3:ed:f1:d0:70:91:1f:5b:62:08:8f:bd:d4:cb:
b2:67:a2:9e:dc:ae:38:71:ed:5d:fa:5d:2e:f8:cd:
e7:c4:00:2e:93:37:5f:44:af:56:cf:43:eb:d7:f4:
1a:9f:28:cf:60:98:3f:80:0b:2d:55:77:cf:76:09:
75:c3:c8:2c:6c:a2:87:00:26:92:a5:f2:fc:28:d6:
64:33:cf:f1:95:03:d2:b6:e2:d0:84:d0:de:c8:3d:
fd:c8:35:6d:61:5d:15:f7:fc:71:9a:b3:c3:f2:a4:
03:2f:0b:e3:85:33:33:ad:69:ed:34:33:45:a1:f2:
bc:f8:9c:89:a4:95:71:aa:12:e7:0a:90:2e:25:ff:
a8:15:7a:63:46:29:d7:6a:62:b9:5c:17:6f:7d:70:
26:5f:d0:0d:76:f0:a6:cb:23:db:97:dd:2f:14:e0:
ad:bb:8d:8f:3a:af:71:8e:a4:b8:66:11:fe:8b:24:
dc:e1:13:30:2f:f1:56:8e:3b:b5:cc:97:03:8c:5f:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:6B:C8:7C:F7:FC:4B:03:A0:03:BB:19:DF:FF:18:DE:CC:D5:AB
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b9:0b:54:28:01:0b:8a:22:84:79:e3:e8:75:1c:95:bd:da:
54:dc:28:56:ae:9d:03:9e:4f:46:18:5d:32:f5:53:b4:c7:9b:
81:4f:d3:84:6d:1a:e4:05:f0:61:03:f7:fd:c0:fb:03:43:82:
b0:f3:43:85:88:c7:d8:15:53:64:c8:dd:4f:46:5e:56:e6:de:
33:f8:d0:d8:81:31:14:fc:0a:99:94:ce:03:a2:ad:71:4a:a1:
f2:77:29:51:fa:c1:bc:22:d2:68:9d:21:2f:95:28:8d:05:be:
54:ec:2e:1f:eb:b5:ab:d3:76:06:e7:a4:9d:7d:11:75:9d:b8:
7f:64:cf:28:c5:6b:fd:e5:a9:02:11:54:a3:25:5c:0f:8d:a1:
41:9a:6b:5e:85:90:14:d9:00:8e:c9:b2:08:ea:25:a7:75:cb:
1b:a0:93:e6:96:e8:bc:69:fb:b7:4e:fe:8b:4a:60:ad:42:d7:
9d:59:ee:78:7c:8b:f6:e1:d1:22:a9:5d:a9:b4:4c:b7:59:05:
4a:82:b8:f1:50:9a:f5:d7:85:af:da:91:c9:04:4c:f7:ee:bb:
6d:87:22:c3:3d:95:9e:0f:c5:2f:4f:96:55:7b:ca:18:e8:8a:
bc:ad:0e:3f:98:05:a3:56:c9:43:02:95:4f:eb:67:aa:b4:8e:
3b:97:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:46 2025 by rpki-client