Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: mEUvvWZksvXaCPTd18dCiIU6a3cWknGPK8dezuTSQr8=
Subject key identifier: CE:32:CA:21:C3:09:9A:B4:32:B0:C0:B2:EC:28:B0:1F:54:AD:09:66
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0194BC729422991FE59BE56D5A33A6425BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 131F
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: OSjuv7fJwzAgCl2KoW9w/xU9qXu1+9gbtw8SCEcw1AQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:22:99:1f:e5:9b:e5:6d:5a:33:a6:42:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=ce32ca21c3099ab432b0c0b2ec28b01f54ad0966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:25:cc:48:99:93:31:87:bc:eb:e3:85:78:
88:47:e1:68:f6:2c:cf:3f:1a:e1:f3:e8:c7:99:95:
4b:0a:eb:6c:b3:62:60:d5:a6:b0:4e:05:73:38:29:
8a:cb:45:1e:32:55:c8:c7:15:12:db:c1:7e:b4:a1:
ae:27:d5:fd:00:e4:b8:64:69:11:5b:84:45:6b:3a:
58:49:d4:d0:7e:6f:f0:ad:ad:3e:b2:bb:42:a0:a0:
6b:5e:53:26:9e:78:e4:14:17:65:f9:e1:37:a6:c6:
4a:e2:5b:4c:ab:16:3d:84:58:08:ed:ba:ee:89:e5:
d1:1f:93:10:db:66:e8:6e:b8:bd:25:68:db:11:7a:
8f:bf:ef:2f:61:8e:7c:36:85:5c:c3:93:fb:75:05:
11:a0:85:40:cd:91:8b:2d:e4:64:e7:83:8f:63:94:
80:91:ed:09:8e:17:f6:72:a1:90:c9:b4:95:71:68:
27:9d:45:26:a3:0a:e6:ef:83:92:c4:92:b8:10:00:
9b:1e:40:5a:9e:f5:80:1a:8d:f4:ec:ca:15:7c:cd:
a2:e2:59:55:9f:1e:0d:10:48:cf:f2:1d:ab:22:17:
3c:c2:ee:9a:8c:ee:03:9e:42:6d:9d:0c:da:d8:6b:
63:05:59:1e:3f:0b:bd:44:07:b9:85:21:6d:cd:ed:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:CA:21:C3:09:9A:B4:32:B0:C0:B2:EC:28:B0:1F:54:AD:09:66
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:c5:e1:9a:8f:22:9d:56:21:87:40:31:dc:1f:c8:7f:08:
94:7d:4f:b1:96:de:95:ff:0d:64:19:c0:21:7b:fa:b2:4a:ed:
0b:e6:b0:e7:d0:6f:64:44:82:8d:67:14:ed:9d:a9:fb:b5:ab:
a8:21:cd:6c:40:c6:96:63:a8:43:3b:f9:ed:46:14:30:29:e9:
eb:f3:51:be:66:f7:1f:97:a6:68:ab:bd:22:58:87:54:5c:df:
e0:73:4b:8d:f8:ca:b7:74:5b:2f:5c:c8:55:e1:e0:e4:21:c1:
a6:d9:4a:cd:08:15:d4:0d:10:eb:c2:30:d1:3f:b5:a2:75:c7:
db:31:49:c8:af:c7:a1:8a:d4:17:b7:87:f8:e5:be:12:9b:62:
c3:92:d0:0f:a5:76:1b:13:cd:4d:45:c5:73:eb:a1:40:22:4f:
12:cc:bb:6c:ea:cd:44:b6:66:dd:87:95:82:72:ef:67:7e:b1:
94:02:05:49:fe:4d:1a:bf:e3:a2:b2:b5:51:2a:e8:1e:65:10:
74:56:de:11:c1:e2:51:6d:49:dc:d0:d3:5f:56:08:58:4c:8d:
b3:a5:49:94:14:57:a2:a6:aa:f4:a7:6a:a3:a5:c9:2d:9f:19:
39:e7:79:ce:de:1e:2e:75:03:d5:50:47:51:0e:57:2d:6b:90:
70:80:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:30:59 2025 by rpki-client