Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: 4rzwdc9tia9P3gTDzdMVQziaJ6DINXJ+hGNxH447QDY=
Subject key identifier: A8:B0:8B:21:B6:99:91:7C:06:EE:F9:9C:4B:FA:82:DC:CE:54:40:A9
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0194BCE0C7C936AD0F8E4E013BA4FC1E08E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 011E
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: JMWQ50pWbCSg6nS7gpHyq+q5nGsNrFZoSRbp9T1MFnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c7:c9:36:ad:0f:8e:4e:01:3b:a4:fc:1e:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=a8b08b21b699917c06eef99c4bfa82dcce5440a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:f2:12:ae:da:8e:4b:92:e0:99:a8:25:d0:
50:73:02:fb:49:c9:fa:34:0b:70:a2:68:94:8b:3b:
a7:4c:e2:b4:f7:6c:8f:2e:32:68:0b:af:4b:42:7f:
09:55:71:1c:1a:74:2c:2e:b3:89:21:b8:8c:1d:51:
38:41:57:4f:26:c9:8d:15:37:29:4e:6e:06:8a:fc:
f6:69:49:57:6d:31:d0:0f:6c:16:a9:46:a9:16:fc:
c3:f7:5f:b4:30:fa:0d:df:c2:17:c0:69:dd:65:a6:
14:1d:5c:54:4c:91:11:fe:39:af:63:bd:f5:69:09:
e9:39:b7:d1:0d:fc:35:e1:88:b3:7e:cd:da:5f:2a:
28:03:68:55:ac:35:c9:78:04:a8:1e:ad:c3:6b:3e:
1d:6e:d1:89:d1:77:b9:03:95:39:3c:91:81:93:d1:
24:62:03:7a:31:54:83:a2:a2:88:5b:95:4e:16:37:
ad:37:74:29:19:6a:e0:28:9b:cb:c8:06:c9:74:93:
12:27:4f:37:02:61:bc:65:ef:45:de:27:b9:5f:47:
21:8d:b6:e0:46:55:6c:01:79:31:fb:ea:8d:4a:1b:
9a:57:e9:11:e2:99:3f:32:d5:8e:9b:13:e0:d4:2b:
58:37:c9:7d:8b:09:3a:f2:08:d3:44:5f:ae:47:3d:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:8B:21:B6:99:91:7C:06:EE:F9:9C:4B:FA:82:DC:CE:54:40:A9
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:73:65:9d:92:76:cf:a3:e1:f8:37:60:59:de:e0:ed:d5:c4:
10:78:95:22:02:82:28:87:76:77:4a:5a:9f:7f:53:44:ed:63:
09:f3:6d:b3:55:07:d6:cb:dc:29:c9:ef:f9:20:4e:f1:80:ee:
80:fc:b8:9e:f1:0c:ad:04:2e:58:2e:f3:cf:6a:9e:fa:32:42:
46:99:e5:cb:8c:50:e9:13:75:a3:37:e3:e1:ab:75:2a:94:74:
30:ed:3c:46:00:e9:c5:46:2d:e8:93:f2:39:35:95:cb:49:d9:
79:11:30:8a:72:63:ad:43:6a:8c:1e:e3:3a:07:f2:e7:c1:96:
83:4d:28:6f:d4:08:60:e3:70:c6:6d:f1:f1:2b:9d:b8:06:cb:
5a:de:2f:b2:ae:6d:63:3c:68:56:21:86:3b:f5:9b:35:46:98:
f8:cf:dc:ab:13:f9:5e:7b:46:19:7d:25:5a:db:47:ae:7d:54:
80:25:26:d8:ed:6b:7a:fe:e0:dc:d3:eb:d4:d3:e3:a2:30:d7:
91:5f:98:5c:af:a4:a3:df:d5:6e:ff:0b:f1:14:a8:2b:23:f6:
1b:ba:56:2f:15:3b:97:9f:4f:b5:5d:7e:a0:31:54:bc:02:47:
d7:7d:43:5d:fe:c1:38:b6:91:50:80:1b:a2:39:fc:0b:f7:ac:
1f:e4:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:11 2025 by rpki-client