Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: ZkofTGedwathd28PddlRaNjHXjmeLnfiBMCT0gbsN74=
Subject key identifier: C2:88:D6:E3:A1:5E:81:DC:5B:F5:26:D7:9E:67:3B:05:7F:97:7A:EE
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 0194BBCE409BC253B193AB195E6E765D3691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: lVJpe260qGX3e6stTFn772vx8lk.roa (hash: yoxYAKlvQPYmMi4Wc+00BZ6o5xl5cSxpwL5SfaGUG28=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: H6QN1N+oUj6FPcI6Nm5GOws0R27/HKTkBkOG+0Egymg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:9b:c2:53:b1:93:ab:19:5e:6e:76:5d:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=c288d6e3a15e81dc5bf526d79e673b057f977aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:b7:fe:b5:1a:5f:34:f7:19:a4:6f:0a:43:
fb:eb:7b:39:c8:46:62:28:27:f2:58:a5:d3:a2:9f:
91:ab:34:49:1b:d7:22:6a:db:ff:56:e5:b6:b1:8d:
cf:21:5b:45:c1:64:c4:af:e3:a9:8a:38:40:c5:d3:
21:1d:40:11:54:b7:13:99:1a:33:77:b0:14:9e:27:
bb:a4:ea:c8:9b:91:27:f8:bf:44:6e:1e:5e:60:c4:
75:d2:86:75:f6:1e:07:1b:df:af:9a:83:3b:cf:7e:
85:6e:70:e5:23:33:36:b8:10:97:ed:40:5d:0a:cb:
47:c7:93:80:f3:d0:f3:09:c2:98:1b:5d:fc:47:e3:
e6:69:44:1a:0e:4d:12:e3:a7:1f:51:9e:48:47:17:
08:2b:a3:e1:1d:4d:ec:45:e7:5b:f3:fb:4e:23:e6:
b5:e9:d5:c5:b7:40:c4:b2:03:32:6b:9a:c6:f6:d0:
2c:3c:f5:c6:e4:ae:73:68:7e:79:88:a0:36:3f:20:
93:fd:ff:5e:7a:24:94:3f:ac:25:4a:25:04:8c:81:
44:08:9a:7e:b1:fd:f0:f9:04:a7:0d:56:23:bd:6f:
15:8a:57:a1:48:6a:2f:5a:db:94:be:52:ee:b0:e1:
67:af:04:cd:db:5d:40:4a:98:f7:76:86:13:b4:39:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:88:D6:E3:A1:5E:81:DC:5B:F5:26:D7:9E:67:3B:05:7F:97:7A:EE
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:42:4d:2f:58:9c:b9:fb:57:35:6d:04:35:7e:32:28:e6:
8a:ad:20:28:d2:fe:98:a6:6f:57:50:c3:1f:b4:f9:78:68:8a:
92:fc:06:30:6b:60:04:a7:71:9a:28:9e:d1:73:5d:c1:8b:f5:
ad:9a:8f:05:0c:41:6d:0a:e4:69:dd:03:a4:af:13:c5:14:b0:
ae:21:44:6f:4e:25:e2:ab:2f:ff:67:66:36:eb:de:62:de:d3:
73:b6:86:71:b7:9a:8a:86:bf:ed:16:96:59:cc:4c:16:30:22:
31:f5:01:4a:35:f4:df:88:eb:de:57:fe:f5:17:72:e6:2b:7f:
4e:4a:3f:26:a0:11:21:bf:87:bc:2f:56:77:79:48:4c:5a:46:
68:a0:f9:26:42:cb:79:1c:35:d8:7a:0c:53:06:1b:1f:a5:21:
50:d5:37:f9:b3:6c:67:d5:66:8d:a0:23:84:57:46:d5:de:f5:
9a:d5:be:1e:11:7d:b5:32:b9:54:a4:31:4b:ee:78:e5:3a:5f:
31:3f:0c:15:de:b0:b8:15:e0:32:66:4a:96:7e:f4:6e:28:b5:
12:f6:7f:c8:71:72:d3:ac:f0:f2:cd:5b:1d:06:a6:98:99:26:
7a:00:5f:6c:d9:2e:47:03:f8:1e:33:15:4c:10:c4:3d:cc:77:
cf:aa:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:23 2025 by rpki-client