Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: t5dOyLPGBtIVD0vmO7r2RDHdQa1y/zuNI09QiT/NThc=
Subject key identifier: 94:DF:F5:BB:A8:19:9E:42:9D:1C:1B:FF:A0:88:13:75:44:7E:9D:B7
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 0194BCE0B3A7B1FA4010EC5083EB498D6514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: Jr544vWlq4pexpbSowq8s3FwYShy8HSrJAFin376+kA=)
2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:a7:b1:fa:40:10:ec:50:83:eb:49:8d:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=94dff5bba8199e429d1c1bffa0881375447e9db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:a3:5e:f5:11:30:d7:0a:59:48:92:4d:09:
e9:69:2b:48:48:0b:ff:85:cd:2e:a7:1e:74:58:a1:
78:1c:c5:8b:0b:db:69:34:dd:92:24:2f:a8:d8:b7:
65:5a:c9:65:a9:02:f7:d8:de:67:af:51:2c:a5:03:
f2:7e:e4:01:8f:be:03:49:08:bf:6c:b9:a1:82:ce:
e6:f7:00:2f:40:86:45:d3:6a:da:96:c5:dc:19:2a:
39:15:90:26:c9:a3:7e:d6:e8:a5:50:2e:22:2b:a6:
a0:4a:52:b9:f3:84:e3:3f:67:bb:ff:e8:90:87:5e:
4e:5e:f9:1d:8f:3f:b8:30:8b:b3:9d:ad:72:c3:7c:
9b:df:de:dd:f3:ac:ec:23:85:30:c7:f0:35:a1:31:
a2:3c:9b:e9:85:d3:70:d0:c2:cb:a8:d6:7b:0c:26:
cf:20:31:c0:5c:2e:2b:c6:d0:df:bc:af:f5:79:c2:
01:bf:7d:0e:41:63:83:48:a5:db:79:80:71:6d:17:
50:50:64:d6:ef:08:c6:f9:1f:56:8c:c6:ee:3f:89:
82:76:3f:38:52:ad:7a:b7:9a:48:98:be:ad:86:05:
e4:e0:8d:cd:cd:be:a3:6d:c8:0e:1e:f0:cc:60:65:
dd:8c:1d:70:8c:7b:be:a1:fe:ac:c0:f7:34:b5:88:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:F5:BB:A8:19:9E:42:9D:1C:1B:FF:A0:88:13:75:44:7E:9D:B7
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:c9:ca:a7:7b:2c:39:98:12:7d:01:50:2c:5b:5d:ce:e0:
3a:75:0a:dd:dc:ca:05:38:07:2c:e4:8e:59:5d:a9:73:af:ea:
57:e0:68:4b:74:a7:01:53:4a:c1:3d:23:1d:cc:ed:cc:d5:18:
b5:cb:92:af:ff:a5:d5:58:f4:fc:17:ab:9b:10:c9:24:fb:86:
ae:57:e7:99:b0:94:84:a6:bb:6d:3a:bb:63:f0:ab:91:bf:b6:
de:ef:b9:54:a9:98:79:03:64:2c:89:a0:3a:d3:40:35:f8:2a:
5b:f2:69:b7:a0:70:43:aa:51:fa:d7:61:72:69:8b:53:6e:a6:
75:10:5d:00:92:d2:aa:ba:31:3c:a9:b3:c4:0e:60:a2:62:37:
07:f1:6b:e0:66:ed:7e:a7:11:d2:56:d5:32:e5:05:2a:4b:5a:
90:7b:08:0c:3c:5c:e3:44:1a:f9:a8:bb:28:d3:b6:e5:8f:43:
a4:9f:72:ae:a3:ed:52:ba:18:ae:3e:67:ec:66:c0:0e:45:bd:
d1:7c:5c:04:80:f0:82:b0:18:d1:e7:4e:d1:cc:92:2a:ea:82:
de:d6:30:16:ab:3d:40:d2:aa:82:81:07:99:59:f1:1b:7d:87:
10:fe:c0:36:3f:04:4e:4a:8a:57:35:6d:d0:2f:c8:50:5f:96:
2e:de:1b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client