Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: Z3511Ut2UHcjdiPNsGgRRe2iBhXRBTGCJXNu+UrDMZs=
Subject key identifier: C5:30:D8:5D:35:6B:52:B6:80:78:32:14:99:10:D0:0C:C4:A8:CF:6B
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0194BBCE09979065B9FDFC123ABB0D2BF1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1234
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: wQRKq2EiaJHwicWk5hyJyPR9hZmmPIGtR7TB+YVZ/3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:97:90:65:b9:fd:fc:12:3a:bb:0d:2b:f1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=c530d85d356b52b6807832149910d00cc4a8cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:97:8a:47:68:5d:5e:8b:ff:c6:a7:87:8f:
89:37:c1:4e:52:93:84:79:8f:c4:1f:72:73:c6:cd:
58:30:8d:14:d0:f2:2c:da:77:1d:18:94:06:14:b4:
78:85:3c:02:17:76:f3:48:99:53:16:95:a7:a0:a5:
f1:44:d9:65:4f:3e:94:e7:8e:11:dc:bf:77:49:42:
f1:96:f8:41:d6:b0:64:e7:64:c6:40:07:4e:a5:15:
ff:36:44:28:82:0d:76:0b:a7:22:e4:fd:fb:8c:91:
d2:c4:b2:d1:05:af:11:61:cd:fe:e9:3b:b5:c1:d1:
b3:28:66:bb:02:ab:d7:4e:76:8c:9c:0f:2f:ae:4d:
12:d7:73:8b:c4:19:00:6a:1f:ab:a5:ca:40:ca:47:
2f:42:87:4a:fc:12:7a:f0:45:2b:2e:4b:ca:f6:33:
ef:af:45:e9:88:44:1e:eb:93:25:c7:bd:cf:84:dc:
af:67:56:98:f0:e7:c5:46:70:d7:59:00:17:92:28:
3f:37:a8:7c:33:36:b9:0d:1a:be:55:ed:0a:8f:bd:
d3:b6:0c:d4:37:1b:8e:f2:ff:d0:de:80:d7:48:ce:
65:45:a5:33:9c:8e:fa:48:e6:b5:c0:66:15:fe:93:
e2:20:b9:07:37:6a:03:04:41:8f:50:86:fa:1a:ce:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:30:D8:5D:35:6B:52:B6:80:78:32:14:99:10:D0:0C:C4:A8:CF:6B
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:44:9a:99:8e:bd:5a:9a:39:da:87:56:19:e6:d9:6c:52:3b:
49:00:6f:ea:99:f4:9d:a9:7f:2f:6d:71:04:7c:c4:4e:8d:e3:
8e:1c:21:50:0b:7e:cc:89:e1:9e:c4:f2:59:f6:f4:f3:bf:e8:
ef:22:b3:e5:67:77:a5:19:19:fa:21:6e:ef:75:7f:f7:e9:d0:
76:6c:21:9e:c0:e5:4a:40:91:bc:26:db:07:68:79:6f:49:ec:
64:bb:29:91:e2:05:be:cc:b5:0c:3d:e5:af:88:96:91:e4:9c:
32:50:6a:c4:1d:37:56:e0:c4:1c:c8:6c:bf:b9:88:32:b8:6a:
15:90:fa:50:d4:a4:67:32:1c:3d:1f:8d:43:e1:f3:9f:32:5b:
c5:7f:45:1c:c6:2d:46:ec:09:61:f3:82:0e:51:9f:76:c8:46:
63:4e:7c:2b:67:f7:77:9b:35:6b:99:be:c6:37:b6:f1:12:66:
ae:eb:d1:55:0e:86:9f:e6:13:0b:c8:d6:ac:97:d9:59:0e:c2:
48:6e:f9:cb:02:31:d3:f0:32:7c:53:00:ee:5d:89:01:fd:ad:
3b:60:54:a3:3f:83:f1:27:b2:ad:d5:da:fd:91:b9:11:fb:99:
7c:2a:5e:90:ff:3b:51:d6:7a:1d:5b:66:84:6a:41:14:07:e1:
46:bb:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:54 2025 by rpki-client