Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: rTTi5HsTx8SR/oFRpxIbzeq9xGNv7e0nHUr2r9FuyNQ=
Subject key identifier: 92:62:A4:29:CC:58:4E:0D:C4:AC:49:81:9E:E4:35:96:7D:77:86:3B
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0194BBCE2554EFA4D09000DEE92A3239A736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 128A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: 6RN9RNS5dEEvWL88uLHcjeGg/MtjQ0J24wZ3L1VJN3s=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:25:54:ef:a4:d0:90:00:de:e9:2a:32:39:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=9262a429cc584e0dc4ac49819ee435967d77863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:02:18:df:7d:4e:ee:92:42:91:57:0b:a2:
2d:73:3f:fb:c8:83:ae:d1:3b:32:c4:b6:89:89:dd:
34:2f:c8:24:eb:8c:3a:3a:3c:a1:23:7d:1c:53:2e:
06:55:37:7f:26:eb:38:5c:7d:ea:a7:af:dc:73:4a:
6e:e8:ea:c4:2d:e8:ca:6e:9f:97:bc:e3:a1:7f:97:
df:52:aa:d5:58:26:a3:75:65:27:db:e4:e0:23:53:
4e:96:ed:b7:58:c7:8c:a9:96:04:1e:a6:35:5f:bc:
f9:81:40:14:c9:31:a5:50:e9:ee:05:f3:3e:53:6c:
cd:8f:24:25:ac:2b:45:80:91:0d:9c:67:72:e0:84:
a4:cc:82:2c:80:8a:a2:01:8a:14:7e:e9:9b:92:2e:
5c:66:20:bb:c3:cc:5d:45:96:f1:8f:c9:82:15:6f:
ab:88:18:c8:ef:96:45:a0:a3:90:ca:d2:0a:76:5f:
c7:22:62:bf:0d:d8:46:41:4a:44:d0:34:3c:74:7c:
df:10:a7:6c:ed:a0:6e:f2:81:57:38:ee:ed:84:ef:
b1:88:cc:f3:3e:67:c0:12:e0:36:93:61:3a:6b:2f:
fd:66:5a:85:8d:09:e1:f4:55:ff:ff:0a:e4:1a:76:
75:a1:c8:e3:8c:50:18:4c:47:5f:b9:04:84:17:44:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:A4:29:CC:58:4E:0D:C4:AC:49:81:9E:E4:35:96:7D:77:86:3B
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:ec:5a:31:b1:6d:65:16:3b:c3:5d:c5:5a:4d:46:02:c1:
13:c9:d6:fb:e8:a0:5c:3a:cb:04:7d:2e:32:d6:29:48:7a:b1:
d4:5b:7b:76:9f:b6:6b:44:59:b7:39:ab:62:ce:54:91:bc:d6:
69:d8:5f:56:64:89:e2:a8:87:e3:6e:61:26:25:96:70:eb:a3:
3b:ee:24:93:4a:b7:da:36:13:0e:0d:8d:e4:4b:ad:ef:3f:ce:
6b:26:6b:ca:ea:ff:57:e3:af:8b:1f:15:71:4f:f2:57:a2:6e:
66:d8:6b:01:03:b8:5e:f5:a3:1c:48:aa:18:ed:de:89:44:67:
c6:ab:c3:9d:30:3d:ad:e1:cc:57:7c:8f:9d:6b:a0:f0:9c:a5:
08:f2:75:22:2d:04:c6:c8:be:a1:e0:ea:ab:c4:aa:02:5c:9a:
b4:70:ee:ff:5b:45:07:26:a7:3f:21:40:6f:7d:06:91:4d:e8:
17:57:0e:f3:53:93:1d:40:d1:38:8c:78:86:78:7b:75:86:09:
30:b9:f3:75:31:d7:3e:c8:7c:d4:8c:46:99:bf:c5:c0:5f:e1:
8c:5c:e6:17:1d:92:23:9f:6b:cd:6a:d5:d2:cb:7f:fe:b4:63:
2a:f1:94:c6:7d:5e:2b:94:14:aa:ab:98:10:38:e4:f0:99:50:
e9:ba:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:13 2025 by rpki-client