Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
File: q0U2TkncOhW-_yacOjKzwFQci2Y.mft (raw, json)
Hash identifier: TJUlLIRPse7unKfjcSUXbsETzlu3AQKvDlLyO/0QoM8=
Subject key identifier: A8:06:BF:F3:6B:AA:85:13:EA:A6:8C:EF:A6:AF:0C:8F:71:63:99:26
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Certificate issuer: /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial: 0194BC04C667BC6ACAC0F7C8ED96AE42D2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: Diq6O5ga68_B8MEC7x3IDqn6lbc.roa (hash: r+Ep1MU6KZ691K575NCgrIa7fSiICzMjhV/0OlU71vU=)
2: q0U2TkncOhW-_yacOjKzwFQci2Y.crl (hash: eheBeRIyS7ZrrqcD4aDGvLR/aAjcaaK8QAxzKzLcYhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:67:bc:6a:ca:c0:f7:c8:ed:96:ae:42:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=a806bff36baa8513eaa68cefa6af0c8f71639926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:5e:e1:92:24:ca:e5:52:c2:64:68:1c:45:
bb:ec:98:6c:7f:5d:2d:4a:90:10:5a:7c:49:31:65:
79:dc:26:ca:2c:60:79:f0:aa:b5:36:14:96:75:0f:
61:c2:fd:27:9e:df:f1:3a:76:5b:0b:c6:84:da:9c:
dc:06:50:3d:6d:f2:44:99:21:09:ad:33:42:0b:7e:
7f:02:b5:fe:f1:df:ba:22:d4:58:27:91:04:f4:17:
b7:e4:31:93:e0:64:db:e5:4d:f9:45:a2:bd:3b:ec:
14:39:51:5b:d1:cb:ed:3c:69:6c:d8:10:3c:8b:0c:
0f:cd:4b:fb:b6:12:74:ae:4c:2f:d2:83:d5:19:f3:
0c:b0:1a:97:05:30:51:b2:36:01:e4:59:e7:f9:62:
82:93:7a:ec:79:b2:0d:30:91:de:c2:cf:cc:7e:41:
fd:a4:fa:34:3e:24:50:d9:f8:3f:52:c9:b8:6d:02:
da:e3:60:6c:c8:94:9f:34:d5:49:7e:67:a2:13:dc:
88:a5:44:c7:07:13:a0:07:a8:54:20:ac:d5:ba:da:
39:82:66:b6:53:7c:8c:6c:9d:5b:aa:61:aa:39:47:
c6:69:96:6b:63:55:c2:ff:ae:7a:ad:f2:33:80:3f:
e1:20:aa:5a:d4:01:47:2d:0a:cd:23:94:50:db:59:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:BF:F3:6B:AA:85:13:EA:A6:8C:EF:A6:AF:0C:8F:71:63:99:26
X509v3 Authority Key Identifier:
keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c0:1f:13:f6:44:c2:cb:e0:81:91:c6:3a:5c:2e:fd:59:37:
7a:d1:dc:a7:ba:f9:5a:5f:bb:4b:de:ab:76:5c:d3:91:8f:ab:
b5:cb:bc:74:c7:97:db:4c:98:0e:44:cd:f2:a8:c1:a5:dd:a6:
1f:40:4e:5b:09:7f:4a:28:56:ea:fb:21:40:25:62:0b:4e:a4:
0c:85:51:57:44:a1:3e:cc:31:93:92:66:6f:0f:93:4a:10:3d:
e8:d2:9b:e9:8f:6d:7c:c0:e8:3b:18:a4:4f:9d:97:b0:99:6d:
52:78:e4:0a:8f:bd:de:b0:f3:a4:e0:19:06:fd:ec:75:6c:e3:
80:61:ca:1e:e4:16:88:f1:e1:de:72:dd:ae:bd:9c:da:fb:4a:
b4:a1:9c:0b:e1:87:ed:78:c4:86:31:30:d2:f9:81:f9:a3:2b:
c0:05:96:ee:d9:b4:17:db:86:9d:47:cd:22:aa:e1:ba:ba:1a:
2a:3d:6a:c6:75:27:cd:b6:1d:ea:65:fd:bb:c3:72:ac:92:ef:
54:35:2b:95:27:ef:e2:5d:5f:c4:84:f8:22:62:0b:6f:9c:fe:
11:bf:fe:8c:14:2e:f5:8c:b7:8e:82:d5:0c:11:e0:ea:5d:cc:
22:d6:43:f7:03:99:9a:a9:8a:32:5d:b4:7f:44:17:56:91:01:
d3:0a:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:22:51 2025 by rpki-client