Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File: qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier: fbLiUlO7mEkakgJSt2jR72OAGbNCyDCTfBKP+yeWnsE=
Subject key identifier: 3E:6B:3B:EA:CC:A3:F8:09:56:92:17:43:7C:D2:4B:63:8D:93:49:39
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 0194BD174EDB6C1C0E509118EFA90C551398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=)
2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=)
3: DpzvwQnVRaFViTZyqTXRWJwxueM.roa (hash: au+QUyze3MKMGVHiIM5HXwnLMoQJIUaM60I83uw/tEc=)
4: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=)
5: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: XXiEvCEpAYKpur5WhVfQzFGAj9hhoWWeMkCJZ/Y5MFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4e:db:6c:1c:0e:50:91:18:ef:a9:0c:55:13:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=3e6b3beacca3f809569217437cd24b638d934939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:87:1e:c9:b1:3b:3d:d4:df:5c:a8:bf:d4:
92:4b:86:c7:77:08:b4:48:59:2a:5a:73:e0:f4:4f:
12:f4:93:cd:ee:be:5c:ef:a8:5c:4b:5c:15:ef:75:
58:8d:52:a3:58:da:50:3f:e0:e6:cc:e4:ea:e3:e6:
99:d2:32:ca:fb:a6:f4:5c:9b:cc:6d:9f:11:35:d5:
51:84:f0:a1:57:52:a2:2b:7d:af:09:d5:5a:1f:97:
45:b4:1e:d8:ad:1f:b2:2c:8e:4b:91:16:88:84:ef:
d3:47:ad:0e:7e:3a:0c:19:47:e0:0a:86:c3:28:c3:
24:12:aa:78:9f:55:36:d7:52:f6:5b:f8:6a:10:b8:
2b:5a:4f:01:38:cc:51:e4:90:61:59:bb:88:b9:71:
69:24:5d:ad:13:4a:6b:e1:07:69:8a:92:a1:eb:89:
33:0c:37:04:0c:07:54:fb:aa:39:7c:13:2b:d4:8c:
40:cb:fe:22:f9:7a:59:91:4d:2e:33:4c:cb:44:de:
a0:d3:89:74:bc:2a:d7:fd:bc:a5:e9:11:63:7c:08:
b2:d6:60:67:28:5d:f0:ad:a6:ae:c2:17:d7:04:a4:
97:bb:a0:53:86:04:9d:01:66:e1:39:66:5a:5f:85:
97:b1:8a:d1:b0:d2:2f:69:3d:6c:71:1b:7a:a0:44:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:3B:EA:CC:A3:F8:09:56:92:17:43:7C:D2:4B:63:8D:93:49:39
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:65:e3:72:94:2a:15:5a:bf:b4:a2:cc:11:dc:e5:a3:67:
ae:9c:f8:a3:1f:f7:1f:3b:17:d2:47:41:5d:c1:e9:3a:eb:d7:
6b:94:ef:eb:0b:d3:8e:00:fe:b1:f2:cb:99:2b:7f:a1:60:f7:
6d:72:88:9d:a9:13:fc:c5:66:c7:e3:e9:0c:18:c2:42:05:81:
d3:bf:d7:c4:c3:de:99:a8:3d:5a:ed:db:fe:49:ab:10:c9:bd:
1d:2b:1a:66:41:8b:2c:fe:32:d1:6a:88:c6:84:c8:57:78:cf:
ce:5d:1d:d0:f6:76:31:fd:f1:61:73:d4:8f:ec:c8:f9:1d:53:
93:46:91:0a:06:cb:eb:72:6c:07:5a:d0:c6:03:46:6f:e4:df:
3b:c1:13:87:e9:89:d9:58:10:15:1e:e1:30:57:da:72:8b:fa:
55:34:ab:11:3c:83:7d:72:68:10:30:97:0e:2c:cf:11:78:db:
1a:4d:70:b6:cd:6f:ed:98:27:ca:e0:44:4d:f5:10:8c:20:eb:
f3:98:ae:ec:04:99:6d:06:5d:38:e3:88:0b:7d:83:7c:ae:63:
ba:c9:ac:41:5a:c6:20:d8:51:67:0a:35:49:b8:d4:a4:58:ce:
a1:f7:6e:dc:31:0f:0b:23:e5:e3:76:b7:23:85:47:49:5d:69:
bc:ed:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client