Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: SjE7EIg5PF2kcUNSU5WwnJmpgHnGJ5kbmaKPpOpXkgo=
Subject key identifier: F5:F2:48:6F:72:BB:AA:71:C4:C6:20:FD:E3:C5:58:BE:A1:7E:8F:B8
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0194BCAA25F7351BE7B2DF078297160D9687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 0F0D
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: dC164IZPzxe3KljmCfziLrb+uDtckS3L3z0aJ95wT+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:f7:35:1b:e7:b2:df:07:82:97:16:0d:96:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=f5f2486f72bbaa71c4c620fde3c558bea17e8fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:8c:1e:12:d7:5b:b4:17:ca:25:8a:e9:f2:
62:bd:c0:d4:45:40:ac:71:93:26:b8:7c:9a:51:6c:
fd:a2:a3:7f:10:62:0e:2e:62:0e:23:a4:c9:5d:a0:
3d:16:5e:f7:cd:fc:01:93:2d:66:81:9b:f6:72:90:
d0:db:9e:5f:24:b7:54:2b:04:d7:e1:94:ee:27:d4:
08:1c:77:c7:04:84:38:4b:c3:f4:c8:b5:44:83:49:
29:56:6a:da:22:9e:cd:b0:84:39:ca:57:72:6a:95:
04:a6:b0:9d:f6:ad:9a:08:f5:4c:cc:29:d2:85:93:
d3:11:59:11:6c:a8:47:9d:7c:6e:bf:68:fd:e7:9d:
75:d0:67:49:e0:94:75:aa:aa:57:fb:f8:09:29:6d:
1c:9b:e6:77:7d:10:fb:c1:e3:f6:a9:54:18:d6:ba:
40:02:56:88:e2:6a:4d:14:d5:b2:a3:ce:4c:1f:ec:
10:d1:55:8b:e8:66:9f:96:78:99:8c:a9:cd:f0:ac:
e4:67:cf:08:28:b0:9b:5a:3e:8c:72:61:b3:c5:36:
3a:77:78:f6:e7:df:e1:84:bd:b8:02:13:49:2d:18:
ab:24:87:28:5e:24:26:27:aa:84:77:c6:9e:0a:68:
8e:f0:bd:24:fe:54:48:a5:4d:dd:07:42:ef:c5:8b:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F2:48:6F:72:BB:AA:71:C4:C6:20:FD:E3:C5:58:BE:A1:7E:8F:B8
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:80:d9:0d:af:9c:6b:d3:dc:84:98:f4:d6:9b:2c:7f:3a:
32:bd:db:0a:3e:30:31:0b:18:15:46:3d:2b:3d:92:63:39:d4:
76:0b:4c:d8:14:ef:62:d0:55:b5:a5:c2:b7:03:b3:cb:33:6f:
2b:df:42:57:96:95:69:9a:10:be:ea:bc:a8:34:ce:70:d4:c4:
e0:82:56:50:dc:ba:f7:66:ca:96:a2:18:ec:5f:ec:d1:6d:2c:
b6:ec:53:d2:dc:63:88:b3:35:f8:85:a7:19:18:6f:92:a9:cf:
12:c9:65:df:1e:f1:48:5e:36:44:eb:a3:a0:23:99:45:9f:c7:
58:8a:e7:86:47:e1:d1:02:59:96:2f:70:80:24:a6:d9:c0:bc:
9b:e6:a5:02:ad:59:8e:04:5d:27:a8:ec:b5:50:0f:f5:0f:a0:
4a:f1:92:4c:f4:b2:b8:d6:5d:f8:7a:e6:6f:4b:d7:74:5e:75:
6b:52:4b:49:d0:2f:72:1f:43:49:32:b1:f5:2f:49:de:af:84:
3f:4f:8b:a2:11:36:f7:10:6a:ee:1f:29:30:19:5d:6f:04:32:
c4:9a:44:94:52:36:1f:49:ec:a6:1d:c7:97:36:f3:55:ad:79:
bc:85:33:14:73:d0:a4:3a:85:7e:c7:40:e8:df:b9:ce:d3:3e:
49:27:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:30 2025 by rpki-client