Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: bKttgEWK7QPcTd76gkvy8MYVGYFbmkvaSO5oBta8X8o=
Subject key identifier: EA:AD:68:50:51:42:67:85:A7:6E:C0:47:53:63:53:EE:BB:C9:96:D7
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0194BC3C9E791EF9640F4A429202E013A6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: YnekrG6Acaaxl/++AGjsQ02HT1piWs2/0JrlQ5OSleg=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9e:79:1e:f9:64:0f:4a:42:92:02:e0:13:a6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=eaad685051426785a76ec047536353eebbc996d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:82:23:2a:98:49:44:2c:0e:3e:48:2e:78:
a7:7f:24:81:62:cd:28:6d:e6:de:a7:a2:b3:cc:30:
55:bf:4c:1d:f3:a1:33:85:82:09:8b:33:04:69:c7:
f3:80:7e:fa:1f:9e:f0:f6:45:30:e8:ef:0c:25:e6:
3a:d3:05:3c:ea:1c:25:de:cf:3a:05:17:cb:38:a4:
b7:1e:dc:b5:8f:bd:32:21:8b:12:30:36:1f:e0:6f:
69:90:50:a0:69:46:0a:c3:17:8d:e2:49:d7:a9:aa:
bd:48:91:13:c9:7b:6c:b1:95:65:98:79:71:17:76:
86:5c:7d:71:04:03:87:af:de:72:93:ff:49:76:9e:
07:ec:83:ab:ab:37:41:c6:f9:05:3f:fc:bf:4a:e3:
3d:f7:90:b9:3f:cc:fb:5f:59:17:9a:4c:3a:0f:61:
73:15:4b:22:d4:55:a3:ef:72:9c:72:40:85:99:3d:
97:08:78:ec:6d:bb:07:63:24:7e:19:82:65:89:9d:
60:df:cf:33:14:8d:ea:4c:1f:22:9a:07:0a:4c:a6:
4a:d7:32:6b:7c:b5:43:10:a6:60:d3:28:c1:20:2a:
2e:b1:b4:4d:59:96:75:84:0f:9a:8b:85:47:5b:aa:
e2:17:e7:aa:3a:28:59:e2:39:ca:4d:70:0d:98:f9:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:68:50:51:42:67:85:A7:6E:C0:47:53:63:53:EE:BB:C9:96:D7
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f6:1b:23:ce:60:46:01:e4:73:2b:5d:36:86:45:e0:ca:53:
1e:bd:42:f9:18:cb:d1:45:fd:89:f7:d8:cd:f8:bc:0a:4b:2a:
2b:57:ec:94:32:a4:21:56:91:33:b7:89:0e:45:ae:30:b1:ee:
4e:f0:43:7d:54:3a:c0:54:dc:1d:37:da:fc:1f:8e:0b:a3:5a:
95:a2:b4:62:79:36:fd:3c:cc:49:9c:a4:86:14:2f:ce:a8:41:
ec:ad:17:e8:d1:3e:27:33:c0:69:46:c5:9d:63:5c:9b:85:45:
e7:e1:e4:92:09:f8:e2:2e:a4:2f:e4:ce:56:bc:4d:ce:d2:b8:
15:bd:25:cd:5c:85:50:88:ef:7f:c0:e7:49:47:55:02:65:a9:
04:a4:d6:46:e8:77:6a:56:32:6d:49:85:31:ba:5c:5e:31:95:
15:e9:df:1f:28:f0:98:bc:ca:54:0b:e7:9c:f6:d1:35:95:66:
53:7f:b3:d3:e4:a2:83:87:02:92:79:00:b0:ec:f5:b1:24:1d:
9f:bf:4e:dd:92:5a:7d:4a:7d:f1:f8:6f:1c:4f:dc:fd:bf:e7:
b0:0b:72:57:25:fb:c4:8f:c7:b4:cf:14:65:4b:4f:17:60:dd:
20:25:61:d0:5c:29:68:c9:83:78:0b:98:1d:7b:52:cc:93:b7:
1d:fe:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:06 2025 by rpki-client