Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: k12KqLqiwvMqacSSMSmMFowObu4dVURbLpb3jVPq/0c=
Subject key identifier: 7F:8D:9D:7C:32:84:34:B4:FB:46:DA:4C:94:71:11:06:C3:19:74:65
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0194BD857AFB108C45D465ADE5CB2A739383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: +PJX5cjmHEHO6/rXC0reOSGgJMS68alv4tPqlmrEid8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:fb:10:8c:45:d4:65:ad:e5:cb:2a:73:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=7f8d9d7c328434b4fb46da4c94711106c3197465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:7c:fc:a9:8c:0d:52:18:be:40:86:1b:73:
48:05:1c:37:63:d2:6a:ef:e2:7c:40:27:61:0e:bc:
39:d2:87:64:78:e4:9a:19:8b:61:06:05:cc:3a:e6:
e6:3b:f9:68:89:16:c4:a9:f0:4b:87:7e:53:ce:a8:
ba:9f:a9:61:f1:79:23:c7:ea:2a:a8:02:b5:4c:0f:
94:13:68:a3:8e:dd:2e:3b:4d:e1:cf:a5:a2:d0:b0:
aa:fd:57:84:e5:74:aa:f8:1c:df:50:df:73:3f:ef:
57:d9:86:8d:05:1c:23:2d:07:45:5a:19:50:92:83:
3e:04:8b:55:e2:5c:39:b2:8f:8a:b1:c0:54:65:df:
97:f4:f7:cd:45:1d:9b:07:6f:f1:88:80:af:2e:39:
ee:09:b6:78:90:2b:93:75:be:de:e4:b8:6c:61:64:
8a:80:31:5a:29:fa:eb:35:2d:10:98:a7:7c:5d:b0:
11:48:16:52:0c:d6:f0:f8:5d:54:45:1e:5c:53:21:
3e:7e:e7:e6:1b:f1:96:e6:ec:2e:80:00:73:dd:61:
45:91:ec:25:6d:da:58:b7:0b:64:63:c4:38:a4:d0:
31:7a:97:7e:4e:2f:b4:d7:78:d9:89:e9:1d:37:96:
8e:8c:75:9c:59:72:e8:29:79:1e:d6:60:1d:90:a2:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:9D:7C:32:84:34:B4:FB:46:DA:4C:94:71:11:06:C3:19:74:65
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:32:c7:9c:01:68:7d:a5:21:99:4e:d9:69:98:ed:b2:9b:e5:
7b:cb:ce:8a:f0:59:fe:38:d7:a6:c2:30:79:98:82:ea:61:0e:
65:4d:f4:62:54:dc:29:f6:ef:08:f8:a7:92:6f:3f:6e:bd:29:
8d:d3:01:2c:42:5a:d2:43:71:cf:78:46:5f:36:e2:3e:c2:77:
f6:d3:9e:b4:93:18:6a:ea:46:01:1d:f8:ca:f2:1f:e8:b0:99:
c2:c8:da:cb:6d:5f:7b:8e:7e:a8:71:25:66:7c:49:aa:9c:7a:
84:19:bf:0d:20:d5:f7:60:44:59:eb:4b:03:ab:18:e8:b2:3c:
8d:30:3a:9c:49:62:33:89:09:e5:55:50:3e:da:9d:22:7f:e8:
a1:e6:5d:7d:a7:16:a8:60:0f:6f:af:0f:b2:07:4e:27:65:f1:
2b:40:6b:15:84:b0:d3:fb:16:9a:9b:d4:10:b0:d5:9f:12:46:
63:42:88:10:96:21:49:de:3e:0c:6f:ca:4a:b4:89:47:28:e3:
69:66:77:c2:ed:8d:74:d0:b6:b5:1e:80:98:f4:e5:0d:cf:94:
6a:f2:58:7f:3f:af:8f:43:ad:78:9a:bb:5a:5f:87:f1:64:18:
8a:7e:8b:a6:35:f1:8f:cc:87:38:d7:d2:cc:a2:b9:c7:ca:d6:
39:f9:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:43 2025 by rpki-client