Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: tnC7P5n/5xVF+B1X6LRlUAy0gxvLTPnnS2XthxF1fQk=
Subject key identifier: C4:36:82:45:3C:12:62:31:AA:27:EE:40:24:6C:77:6A:8F:1B:62:F4
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0194BC04DC5D341D64D109130334132FAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: mLA8RP2AKnMPKrxkNHJrDSBRccmNBvUemVmUi4KNjJ8=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:5d:34:1d:64:d1:09:13:03:34:13:2f:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=c43682453c126231aa27ee40246c776a8f1b62f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:82:d1:f2:eb:ab:b9:bb:ba:53:18:e0:91:
7f:f5:8b:27:83:04:c9:e9:a8:6a:8d:6e:74:02:24:
d2:2b:52:93:e6:ba:37:35:ad:05:bd:a9:f0:b5:7c:
58:ee:5e:1d:e0:68:9a:77:08:dc:18:c0:16:12:f3:
ea:f1:16:57:6a:b8:a0:20:ed:1e:58:a3:aa:f7:e5:
a5:01:a6:50:7b:96:8d:2b:00:12:ec:6f:53:b5:80:
ec:a4:f4:7e:5c:19:09:5a:62:4f:25:5d:9e:26:12:
c9:52:84:36:17:7d:d3:a7:dc:e7:76:8b:72:ee:5d:
6c:05:1c:18:da:ae:bb:94:66:d8:c2:3c:cb:39:af:
50:c6:16:49:b0:2c:c6:c2:47:12:44:2b:4f:82:f2:
f9:10:a2:3e:e3:38:67:59:08:44:69:61:2e:e7:dc:
b5:e5:8e:1d:6b:0d:e0:06:4b:ab:0b:7d:1b:28:f2:
65:85:c5:53:d7:97:2f:8a:ea:1c:45:7c:b2:e4:8b:
5d:2f:61:7b:7e:fa:c4:64:86:04:15:a8:85:98:92:
ba:7f:d1:25:19:2c:93:9b:e5:75:bd:90:0a:9c:7b:
21:e2:cf:86:36:10:37:42:68:c8:24:88:2d:56:a5:
f0:6f:06:19:61:47:c4:f8:eb:65:32:ac:fc:e0:1a:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:82:45:3C:12:62:31:AA:27:EE:40:24:6C:77:6A:8F:1B:62:F4
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:83:fc:7f:36:98:8e:8e:29:9f:ae:fb:4b:d7:47:65:da:a3:
2d:91:fd:21:95:d7:a5:d8:4f:61:6a:d3:63:1b:23:72:87:d5:
79:c9:ad:28:86:75:a2:1a:e0:7d:46:5b:3c:f7:a7:a8:f6:6f:
3f:26:04:a4:68:0e:ae:aa:b7:46:65:3b:28:2d:15:74:f1:de:
4b:f5:c8:9b:e6:17:04:f7:db:f7:f3:b7:dc:a5:1b:01:e0:fc:
be:82:26:03:42:c6:00:ce:18:74:c7:66:f8:85:e6:b6:1b:e6:
33:e9:15:32:cf:46:34:2f:8a:ff:da:ec:1c:44:96:6d:f5:19:
51:57:c5:fc:9b:51:47:51:23:20:ef:4c:f0:f9:03:04:20:38:
37:3e:44:34:60:93:8a:d6:9c:35:5d:f6:a4:5e:81:d4:68:d5:
ec:41:ab:4b:71:a0:0e:5b:5b:18:97:bb:99:4c:ba:46:c7:f5:
e0:62:90:af:39:b3:3c:1b:ce:ce:1e:56:b6:3b:c3:59:81:74:
8d:f7:e2:59:7b:7e:8f:6c:4e:8a:ef:98:0f:bd:56:d8:94:ca:
3b:33:11:ee:16:7d:88:e1:a3:65:0b:19:4f:61:f1:d6:97:7a:
31:cd:cb:24:fe:7c:b3:d7:7b:13:13:68:9f:62:0f:d2:cf:6a:
b0:59:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:33 2025 by rpki-client