Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: 904+IsjnjEX0K1jHFsqvWMWUwsubt3sIIPyydDUAi74=
Subject key identifier: 68:A1:C8:A6:EF:A4:78:C1:9D:7A:81:37:EA:0C:28:80:F4:33:29:52
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 0194BCA99EBF89ADBFC221A18F6432C75D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 13C1
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: Q7E8VXemzn1E5MTwTFqlfcIaHGo1gmODZanSo59KvYw=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:bf:89:ad:bf:c2:21:a1:8f:64:32:c7:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=68a1c8a6efa478c19d7a8137ea0c2880f4332952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:a4:13:f7:43:9b:83:82:06:f2:de:36:c8:
f2:4d:3d:19:aa:3d:37:5d:b6:20:7c:e7:e7:f3:72:
a2:20:14:f2:8d:95:71:ca:59:3a:ae:a6:c3:a8:56:
dc:ec:53:06:28:0a:24:f5:c9:2d:f8:c2:58:fd:41:
ea:25:e7:5f:11:b3:ec:e8:32:96:7f:54:38:1b:7b:
0d:4e:0c:d0:36:06:8f:5a:04:71:60:e2:22:2a:0e:
78:3d:60:d8:5b:ef:bb:17:22:e9:14:27:fb:6b:0c:
5d:02:8a:8c:66:bb:52:ad:d4:15:95:fb:02:91:9c:
77:a0:7b:db:13:96:b2:36:aa:ab:14:0a:c9:e4:bb:
cf:9a:23:40:1d:f4:65:6f:a3:b3:17:79:3a:b6:49:
64:fb:df:0f:6c:27:26:8f:90:19:c9:a9:1c:c8:69:
24:0a:ba:5a:4e:2f:08:92:a2:3a:a3:eb:22:cb:86:
ee:f6:3b:94:f0:76:e0:f5:ef:b9:17:22:57:db:b8:
af:a4:da:dd:a8:0e:ec:87:e9:7c:a5:b5:98:ec:19:
27:9e:91:fe:bf:db:ac:ae:17:f4:a4:4d:c7:23:93:
6e:a9:cf:3d:83:b8:c8:b4:c0:26:9b:8c:94:61:02:
23:45:60:83:bf:70:d8:d7:9f:9b:83:11:cb:e1:45:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:C8:A6:EF:A4:78:C1:9D:7A:81:37:EA:0C:28:80:F4:33:29:52
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:9c:05:40:4b:ce:b9:50:35:b7:81:34:2b:e8:da:5b:ca:
76:31:e5:74:fa:89:33:f3:0d:3f:75:17:68:86:a4:c1:66:93:
a1:78:ae:d6:8e:94:bb:34:bc:6e:ba:92:77:b1:93:d6:41:5b:
11:5c:9f:e3:15:91:c1:b4:85:7b:cc:d3:8c:ba:be:11:5f:dd:
7c:dc:52:eb:90:d2:43:dc:8e:1a:58:78:1d:c5:6b:6f:07:64:
e8:d0:60:05:c8:f2:04:3e:c8:16:f0:32:89:7f:99:ba:b1:3b:
05:96:2a:18:e0:c2:20:06:8b:88:80:e4:fa:f9:59:1e:7d:ba:
2f:1b:5d:48:17:17:90:a4:11:08:0e:42:91:23:32:29:36:1c:
d8:92:29:06:85:f8:c3:3c:a2:8e:7b:cc:29:2e:9e:35:db:9e:
9f:7b:49:5c:8d:5d:89:c0:9c:9c:5c:72:99:f8:32:cc:56:83:
a7:59:18:d6:4c:75:96:12:17:b4:41:fc:2a:51:0d:96:2f:2a:
f1:89:99:29:fe:d7:97:2a:a8:7e:bc:6b:08:f7:95:5a:f5:1e:
2b:90:c4:6f:ff:5b:6e:fa:f6:46:fc:62:f1:11:70:4d:0b:7b:
4e:7a:b4:e0:99:00:34:21:05:ad:04:fe:ea:79:7c:4c:e5:67:
7c:ac:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:26 2025 by rpki-client