Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File: qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier: kU+Y6vgwc5VFGhc8FBjvXvRqAZYVeSN5gn8/JHqyKjg=
Subject key identifier: A4:A5:27:61:DD:2B:EA:26:7E:09:55:EC:7F:EA:3F:52:EE:5C:D1:5B
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial: 0194BCE062469CD72EFD8853C16D066E8A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=)
2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: 65EwlMUQ392ZE4FwzVvXsSBBxKOCFc2tpEIW28RSv/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:62:46:9c:d7:2e:fd:88:53:c1:6d:06:6e:8a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=a4a52761dd2bea267e0955ec7fea3f52ee5cd15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:56:ad:0c:55:8b:ac:af:fa:2f:a2:5b:20:
db:64:bb:4a:c2:6c:94:0e:a3:b5:6c:88:be:38:26:
12:71:69:8d:ad:94:de:b4:14:c7:33:17:a3:1e:f2:
22:10:eb:02:ae:6d:32:38:ea:46:80:94:f9:12:93:
a8:ca:c9:e5:01:73:72:e2:eb:24:7a:fe:16:7c:af:
68:60:2d:e2:71:08:48:b7:0d:5f:16:b4:b7:6b:c8:
54:a5:7f:69:b2:c7:d6:70:92:96:5a:d2:d9:8e:1c:
b1:e4:0d:3b:38:45:23:1d:2b:62:31:32:a0:1e:7d:
76:1a:7e:58:38:1f:f7:24:cc:f4:53:92:6d:08:bc:
d5:fb:e0:f8:ad:fe:fd:83:1a:fa:32:1e:bb:e8:b6:
4c:ec:ab:89:cf:91:ef:73:8a:4d:f4:78:ef:fe:6b:
5e:5d:cc:52:8e:34:c5:6d:c3:67:cf:54:a5:4c:d6:
bf:ac:d8:ff:ce:b5:93:aa:83:c6:73:82:97:92:82:
be:ea:9b:23:3a:c2:90:ea:0d:aa:b4:d6:55:c8:d0:
f7:c8:b0:1f:21:9d:61:4d:c3:e7:3d:d7:41:3c:84:
f0:6d:d0:ff:3e:a1:86:51:7a:65:4b:0b:01:f1:c0:
f7:59:3b:51:89:c5:43:db:be:00:d1:e5:72:df:ff:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A5:27:61:DD:2B:EA:26:7E:09:55:EC:7F:EA:3F:52:EE:5C:D1:5B
X509v3 Authority Key Identifier:
keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:55:f2:d1:9b:18:d3:3b:01:4c:ea:68:95:3f:74:ce:70:
92:9f:06:9d:71:f7:21:2c:4e:9c:70:41:be:98:1c:af:13:fe:
aa:2e:17:89:ec:4d:84:bf:f5:ba:05:68:3b:2c:67:6c:d5:e6:
ce:bb:9d:73:29:23:94:20:c8:41:40:fb:db:c6:b3:69:6b:d8:
fb:44:f5:49:d2:06:39:da:28:e5:ec:3f:87:71:ba:03:5b:06:
cc:4e:2e:c9:e4:cf:83:79:c8:c4:66:04:9f:ac:db:cc:83:91:
23:ae:e3:5e:b4:13:75:45:f3:59:79:76:ab:0a:a9:6c:19:f6:
4f:b5:2f:cf:cc:95:b0:c9:9c:31:06:c3:48:a2:aa:4f:17:c3:
0b:47:de:ac:a7:cf:86:88:aa:7a:f3:54:b6:ec:ec:f8:1f:ab:
79:29:21:3b:e3:cb:34:f3:7c:87:db:8c:c6:bb:22:4c:c5:e1:
0b:31:ef:d1:2b:64:36:7b:c7:ee:4d:e4:09:d1:78:19:c1:f8:
56:ce:b6:b9:29:f6:93:dc:35:89:ba:e7:59:05:8f:d4:55:d7:
44:5d:75:b0:a6:e6:fa:4e:b9:2d:4b:85:86:24:ea:c6:e1:d9:
ba:24:b0:9c:48:bb:e2:2a:e8:8a:bd:ec:39:5c:ac:18:96:04:
b5:22:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:48 2025 by rpki-client