Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: BTHdSatUGSRjmczkqCY4OUu2MEU3/MqWno9JPYOrlMU=
Subject key identifier: 8B:BC:E9:5C:38:2B:18:30:51:F2:CC:33:D4:3C:0C:03:69:B5:92:FA
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 0194BCAA3C2D60F97AED4ECA1E26DC0466CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 0EF5
Signing time: Fri 31 Jan 2025 14:01:00 +0000
Manifest this update: Fri 31 Jan 2025 14:01:00 +0000
Manifest next update: Sat 01 Feb 2025 14:01:00 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: 99GGxxXfHs3k2sOdYF8VyLcpU99RqJKsKXzLgjiZYGU=)
2: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3c:2d:60:f9:7a:ed:4e:ca:1e:26:dc:04:66:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jan 31 14:01:00 2025 GMT
Not After : Feb 1 14:01:00 2025 GMT
Subject: CN=8bbce95c382b183051f2cc33d43c0c0369b592fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:44:bf:58:86:eb:a0:7a:4f:96:fa:cf:9a:
2d:8e:22:60:6a:7c:ea:a7:92:27:3d:3e:24:4b:e1:
34:7e:b1:de:35:2e:b9:c5:b0:75:04:e5:03:1b:78:
eb:e5:c6:b7:1b:18:fd:94:62:27:ff:16:42:9e:12:
2d:43:7f:6d:6d:36:b1:10:ab:21:39:5a:53:40:1e:
6f:b3:ed:24:a3:4c:5b:5b:66:00:22:ce:02:91:79:
0d:4a:48:a8:46:8d:14:26:85:88:74:ee:35:ca:01:
93:1b:3f:22:91:30:c8:05:65:77:fb:c5:d0:e4:e6:
64:f5:53:2e:50:5b:08:ca:e4:9e:0d:be:37:a6:9e:
ea:d7:67:d1:3c:f4:4f:19:10:00:d5:47:01:40:bd:
6c:ff:23:22:fe:b4:7d:78:5e:4e:0f:f5:17:ac:8b:
4e:5e:89:b4:21:e0:46:14:c0:fe:28:3d:b9:5a:74:
71:6c:9f:d9:e5:ea:b3:c8:56:06:d7:af:71:fd:4d:
b5:c2:5a:51:f0:6c:ec:c5:53:98:0d:a6:f2:5c:03:
50:40:5b:6b:55:23:da:cc:a4:9f:a9:9c:fa:46:f3:
a3:85:10:bd:83:b6:ca:ac:bf:da:3b:be:8d:34:6b:
f0:e1:a1:e3:a1:d6:a9:30:b3:9a:67:11:50:32:3f:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:E9:5C:38:2B:18:30:51:F2:CC:33:D4:3C:0C:03:69:B5:92:FA
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:0d:00:1c:e0:ac:44:e1:13:0c:3e:0b:71:6b:ad:f2:11:
ed:31:ed:95:7f:02:d3:14:52:9d:10:36:dd:71:1b:fa:83:f4:
23:51:95:6c:64:14:bb:14:5f:8b:29:9f:82:70:8d:f1:4b:df:
d2:de:49:2d:e2:5b:5b:0b:f8:bc:26:82:3a:af:68:9d:83:29:
bf:4f:35:de:f0:56:b0:ce:2d:59:ea:88:e3:ee:f2:8e:6a:f6:
93:57:7b:f3:61:5f:cc:d7:59:29:7e:95:ef:79:01:8e:4d:30:
b0:dd:37:b4:ef:43:33:27:95:5d:50:ad:6d:f1:2c:23:bf:39:
e5:ee:d2:62:79:6c:da:7e:58:32:e8:a1:f3:da:73:a8:38:6c:
b4:33:a5:d4:86:df:32:23:1a:0d:11:54:1d:71:5d:16:28:87:
55:1a:d8:b1:87:28:78:30:e3:0a:90:c8:70:b2:6d:19:b0:39:
34:ed:5b:f1:14:34:96:1d:dd:da:06:34:ef:2d:0e:fe:c6:49:
96:19:c9:1f:e4:49:b6:4b:81:22:fb:03:4e:42:8a:74:69:cd:
5f:97:57:c2:0d:af:3b:09:d4:aa:79:45:25:9e:ce:91:76:ad:
e5:68:25:de:14:bf:2c:a7:f5:27:df:6d:f9:33:0d:f6:e3:e0:
d7:40:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:46 2025 by rpki-client