Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: tV1pxBaa941KTzMeJVgkKBMTs5KLDAV2L5+uxhYpHFw=
Subject key identifier: F4:0C:E4:AE:31:F9:AC:B6:88:A7:44:7F:D2:B4:B4:D1:F7:12:28:A4
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 0194BC04C8BEA28E7D9B299F02E9364A4F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0B19
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: Q7n8gF3ZYVbGL83zzh2dQnmawHc.roa (hash: nZCFM7j2sE+1KCmTTykVW0xazn9X/ppTbL+++Wr3NQI=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: dM4+uJZqPJKzxuWIDnXys8NsumxZP+MimGWOJ5nDikU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:be:a2:8e:7d:9b:29:9f:02:e9:36:4a:4f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=f40ce4ae31f9acb688a7447fd2b4b4d1f71228a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:c2:a9:79:38:41:b0:4d:bc:c1:9f:e9:91:
27:43:4f:db:57:f3:2b:9e:13:13:f8:a3:4e:19:47:
e9:ee:9b:06:30:6a:43:e3:89:57:d1:b9:d3:5e:a8:
3b:f0:b2:4e:88:70:c4:43:9b:36:34:88:d6:75:19:
b3:43:f8:0f:9f:8f:4e:7c:7b:da:8f:52:d9:11:40:
af:ac:f8:17:74:6b:60:45:b7:a8:e9:9e:8d:0d:cc:
8d:2c:ef:34:af:48:bc:b7:62:96:e3:e6:11:6b:88:
09:44:a5:29:20:99:62:6d:c1:33:fd:05:21:b2:94:
d5:25:1d:60:fd:7d:32:38:d9:0d:63:5d:d7:4f:10:
cb:6e:8b:76:b2:5a:cd:44:52:ec:ec:2d:a6:e4:9f:
bc:51:04:cf:fa:8c:f5:79:d3:8c:5a:42:f4:e8:80:
f9:c3:cb:41:4f:5a:fd:74:d0:9e:9f:e0:f6:dc:d6:
30:4a:c4:61:c9:80:97:2e:27:a3:0b:b7:d0:5b:d1:
22:2e:19:12:b2:f6:ac:4e:18:20:ec:15:b0:ac:64:
ac:c6:2e:ac:09:98:fe:c8:aa:71:dc:3c:b5:f6:89:
33:66:b1:98:53:46:09:af:44:60:7d:24:04:39:18:
b1:3d:fc:fe:af:97:48:35:e2:d3:d6:a6:42:0d:66:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:E4:AE:31:F9:AC:B6:88:A7:44:7F:D2:B4:B4:D1:F7:12:28:A4
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d7:c0:a8:12:fd:2a:c1:36:5a:c3:07:72:37:9d:30:b5:ef:
77:3d:84:c5:4e:20:8a:4f:fb:04:ae:d6:89:69:6d:8a:e4:d1:
5f:dd:df:f3:ff:8f:7a:5d:a6:de:bd:fa:2d:da:82:55:ef:71:
a0:4b:7f:17:40:45:08:d8:53:d8:03:2f:67:59:f0:35:a6:11:
33:51:58:5e:62:00:f6:8d:7b:0d:d0:cf:45:e0:b3:2a:5d:da:
ea:25:b6:e7:28:39:94:5d:7b:15:fb:dc:26:37:dc:fb:2a:7e:
7d:4e:7c:19:bc:6a:a0:11:c3:fc:2a:47:12:3a:7d:23:dc:c3:
6e:25:fb:d7:9f:9b:dd:f9:a9:2e:08:8f:be:13:6e:51:ba:4e:
a5:5f:d1:34:c5:05:18:e2:8a:9c:cb:74:bc:59:7c:66:e9:42:
b4:53:b8:66:84:b3:96:c1:f1:10:14:d1:d9:db:a7:ef:0b:aa:
63:ee:3a:54:0b:96:7e:de:13:e2:b0:76:b0:6b:0c:d5:89:df:
3b:f6:a3:44:db:5b:52:81:1d:fc:f9:06:65:18:22:fa:82:f5:
a5:25:0d:6b:47:37:b0:ed:ed:76:2a:e6:cf:cc:71:2e:1a:59:
60:82:42:4d:84:f7:c8:5f:25:27:53:7e:ba:c0:38:9f:01:87:
67:8d:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:14 2025 by rpki-client