Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: 0e93U7tZtokpLx63FoAPgPePXI5yxJ6cY0Zm6VVQ85k=
Subject key identifier: 95:B7:2F:6A:91:3A:7B:65:5C:DD:CA:5F:5D:AA:3F:3A:38:A9:8B:8C
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 0194BC052671FEF9E78028B1ECC5272A186E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0AEC
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: yXuEmj0qPRMf1JnHprLbJJdB+wtHeogFjEoOxEukitg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:26:71:fe:f9:e7:80:28:b1:ec:c5:27:2a:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=95b72f6a913a7b655cddca5f5daa3f3a38a98b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:f2:ee:fb:72:15:45:a5:a9:e9:e2:df:a4:
2b:6f:0e:a2:2d:b0:af:42:c9:a6:44:9f:24:dd:cf:
0d:a7:c7:6b:1c:04:ea:08:ba:5d:b4:e6:63:9c:d6:
40:74:78:4c:d6:35:6b:eb:a3:6d:d6:da:1a:42:ab:
92:ed:3c:3d:62:d3:4a:65:0f:16:c0:7c:1c:c9:e5:
1e:97:be:a0:c8:c5:ac:bc:5e:09:73:c1:23:20:6a:
ca:37:98:3b:55:cd:aa:49:8c:6a:9c:e3:f6:db:ab:
e8:5c:4d:50:2d:dd:74:df:6b:17:15:fe:be:56:0c:
e3:61:2a:f4:bc:58:6d:2d:9c:0c:74:0e:cd:51:b6:
d1:3f:a9:cc:29:22:0c:fc:5b:56:82:c3:ae:af:28:
ee:5a:06:da:4b:23:cf:9e:6f:2e:aa:56:c4:e2:a4:
1a:3d:e6:b9:fe:c2:e2:fe:fe:80:76:7d:97:f9:93:
aa:72:16:e4:4c:61:67:8d:4e:14:63:71:fd:87:7f:
4b:43:29:f6:30:42:dc:94:81:27:4b:c7:ed:2c:98:
06:25:0d:7e:bc:97:a6:fc:bd:25:ec:8b:f6:44:00:
89:46:17:da:0a:d7:b9:e3:ae:5b:bf:f4:08:b0:26:
b6:23:da:5d:8a:da:88:0d:18:30:28:f6:53:43:48:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:2F:6A:91:3A:7B:65:5C:DD:CA:5F:5D:AA:3F:3A:38:A9:8B:8C
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fd:62:0e:6a:e3:7b:48:61:ad:f1:15:38:88:cf:c1:6a:f7:
b1:60:b2:2b:29:d7:47:06:21:c0:77:55:6e:2a:68:9e:55:ee:
27:5c:7e:b7:72:1d:86:cd:9f:f3:4f:b4:82:88:d7:60:06:16:
77:71:cb:82:bc:63:93:e0:fa:bd:10:0e:a9:b1:42:ee:d9:c5:
d0:4f:e8:9a:68:d8:4d:e5:a5:d5:73:ef:4c:d3:2d:63:9d:1d:
c8:0c:7f:ff:0b:4c:e7:1b:54:98:aa:64:cf:13:b9:1d:d5:c3:
d5:c6:a6:d8:66:3c:a4:91:44:8d:3f:8e:5f:f5:ea:00:41:ec:
09:e6:88:ed:7d:7d:21:ab:8f:7c:3d:c1:d4:fd:8d:ca:23:d9:
3c:9b:db:52:ac:35:69:c5:fb:7f:49:d7:65:ec:86:0c:85:fe:
a8:64:d7:88:4c:b6:71:8b:b6:e4:0e:4f:83:02:81:83:d5:ba:
a5:32:11:fb:19:ba:6c:7e:7c:d2:80:ed:a0:ac:fc:83:6e:e8:
81:a7:ce:a2:eb:be:e9:b0:49:46:c2:c9:48:89:da:52:95:2c:
cd:ff:04:df:d6:a1:eb:bc:a4:dc:84:1b:b4:56:51:4f:79:cb:
52:4b:3f:3e:f0:83:25:a8:3b:ab:b0:a6:2d:22:8a:9d:11:70:
d6:16:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:38 2025 by rpki-client