Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: MtG55uhF5G8aFWLGXDgiVHFvmFj58Un0Y+xxSeV+fJ8=
Subject key identifier: 67:1A:7D:72:BB:F7:E2:73:AA:06:8A:A9:0A:0A:C5:8E:D8:62:09:73
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 0194BD17A40544F312E5970F4C20C1380C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: g4JFkU/6DIMrO1LTrteTdKfv7AK9hxqfx/NnAQ9hzzA=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:05:44:f3:12:e5:97:0f:4c:20:c1:38:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=671a7d72bbf7e273aa068aa90a0ac58ed8620973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:57:3f:f6:37:b6:34:6e:b4:e8:29:1d:a4:
0e:a6:ee:20:bd:93:65:b5:a6:de:b9:4a:71:51:86:
7b:f2:9f:d6:31:ca:f5:8f:a9:31:ee:27:c6:fd:74:
7e:b8:33:28:65:94:6a:6a:a1:6f:49:f8:b4:12:05:
73:33:70:b4:08:cd:5e:ed:35:fd:5e:45:24:0a:fd:
d0:b0:a0:7c:3a:eb:ad:8a:54:2b:dd:a6:ac:58:74:
5d:56:4b:ff:a4:f4:33:13:3e:7e:62:fb:51:4a:fb:
68:1e:02:f6:56:2a:4e:d7:18:3e:0d:df:cf:fd:6d:
47:3d:87:ed:5b:02:57:06:0f:af:97:c4:12:28:de:
4e:0c:9f:62:eb:97:38:1c:a6:09:9c:66:27:e5:45:
7b:49:b2:0c:44:d1:ca:ef:20:45:50:81:61:bd:70:
3b:b2:9c:0c:08:2f:f9:a9:2c:bc:00:45:b3:5c:92:
4c:21:5a:9b:d7:ed:a4:63:9b:e2:4a:d3:65:ba:4e:
2c:53:ab:d2:6b:b3:60:dd:92:1f:79:64:2b:b8:7f:
7b:94:32:af:e1:de:52:e9:24:d4:f3:90:a8:b9:42:
06:c5:58:46:4e:ad:97:dd:fe:5a:0a:34:d5:31:b4:
e4:a5:14:f6:87:cf:43:26:91:46:55:74:81:d3:d0:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1A:7D:72:BB:F7:E2:73:AA:06:8A:A9:0A:0A:C5:8E:D8:62:09:73
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:17:5d:97:0e:03:a2:0b:0e:69:a1:d7:3a:3d:8c:68:30:42:
a7:64:76:fe:cc:97:41:7e:ac:26:35:fb:a1:39:2d:1b:6e:37:
aa:48:20:e8:34:fb:ee:b2:72:62:c9:02:06:82:fb:1f:4f:23:
2c:84:42:0a:ff:39:b8:ef:30:2e:22:ae:9f:fc:f8:50:27:c5:
14:df:8a:f1:c5:44:f3:c2:6a:90:2e:43:16:2c:4d:69:74:9c:
c9:54:4b:5c:ae:65:c2:98:30:95:5d:44:16:e5:42:f9:ac:2b:
96:d3:07:8b:b7:da:ec:0d:31:7b:41:f0:7e:03:ca:12:72:f4:
4a:3b:61:ca:a4:4e:21:17:bb:06:32:02:5c:11:93:65:d1:b6:
d4:b1:cb:b6:9e:fd:22:a2:ba:05:47:79:d8:67:97:b5:6c:65:
ac:df:7f:5c:e2:d4:01:19:eb:8d:b4:24:69:92:aa:cf:b2:74:
30:a5:40:cc:ac:a4:94:d6:10:81:17:24:9b:6b:90:82:b1:be:
26:5b:12:d0:19:90:52:81:57:4d:21:13:fb:d7:41:ed:ed:3f:
db:46:06:d4:8c:f1:e8:fb:d9:46:de:1d:82:91:c2:b6:e2:50:
41:8a:bb:e0:47:68:3b:6f:a0:3e:0b:63:6d:1e:93:c6:fc:f6:
df:05:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:28 2025 by rpki-client