Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: XHhkhwnpWzICY/wNO1LY6PQA0lb+lPyqM3AOOUqDTKQ=
Subject key identifier: 59:A3:6A:2B:48:5E:89:8A:FC:CE:18:76:E8:10:6B:40:13:F3:01:B8
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 0194BD8581A140DFEE508BEF1A425E9ED3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 0196
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 2qe/ccw5tqrpgA97/K7rlTOVkQKB54/Ys9Camx51N68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:a1:40:df:ee:50:8b:ef:1a:42:5e:9e:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=59a36a2b485e898afcce1876e8106b4013f301b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:97:9d:26:0f:0b:fb:dc:1a:82:c1:a6:9e:
87:ce:86:53:51:24:14:99:c7:6e:17:5f:b5:67:a4:
73:3f:0d:58:52:8c:bb:b1:0b:c3:8b:93:3d:62:49:
2f:43:81:c6:50:53:ab:a2:db:e2:cd:88:69:13:66:
5a:93:ae:6d:eb:21:6b:9b:0d:4a:18:3c:b1:da:99:
07:34:10:ce:89:d1:7a:0e:2c:95:be:5c:54:5f:73:
fb:b8:09:93:1a:fb:c8:08:d0:f0:62:16:45:be:16:
f3:73:5f:23:85:02:4b:52:a1:ac:0b:4d:89:e1:de:
10:98:0d:ba:b9:3b:64:de:f8:af:cc:55:d8:a2:2b:
3e:77:c2:6b:fa:01:c5:da:91:34:1a:7d:07:07:24:
17:de:06:74:38:3d:3d:87:87:32:31:ca:b7:5f:44:
ca:56:8a:e7:2f:96:f9:08:3a:61:f5:94:2b:f3:b5:
42:ef:3a:43:12:33:7f:0d:ff:b5:c9:4d:3e:a0:e2:
87:6a:6a:c3:46:d7:16:0a:db:3b:10:1a:d3:01:f2:
2f:fb:41:42:14:c8:0e:ff:f7:5c:6f:17:0d:39:8b:
24:a2:3c:c2:f4:e9:af:33:a1:95:15:64:b9:96:51:
dc:06:c4:1d:f4:57:20:95:15:d9:ce:1f:ca:7a:1b:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:6A:2B:48:5E:89:8A:FC:CE:18:76:E8:10:6B:40:13:F3:01:B8
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:28:f1:ee:fd:d4:99:27:1a:23:9e:50:66:d1:ca:2c:02:3f:
69:3e:e5:9c:26:81:84:47:d4:f3:b4:8a:17:df:27:44:9f:f1:
29:b4:1d:27:60:55:7e:8d:b2:47:81:7d:d1:0a:9b:4d:e3:73:
98:b4:a7:fd:8c:b2:f3:aa:83:2c:f9:34:39:5f:4f:e2:22:26:
e8:7c:f9:e5:29:66:7d:f2:c0:f7:18:9d:0e:61:53:af:99:c4:
45:bd:29:89:c4:5f:a1:b1:9e:99:2a:58:2e:b0:c1:61:75:18:
64:10:51:b1:d6:09:5b:ec:71:9c:47:00:2e:98:83:69:10:b8:
1b:a1:91:fc:39:e2:f4:7e:75:2c:14:bf:42:21:2b:6e:40:47:
4b:19:ee:2b:c5:d5:09:9f:58:8a:13:96:c9:d3:fe:b4:b7:9f:
e2:2d:24:e6:35:7c:14:63:ec:81:76:0b:67:23:c2:2d:f1:57:
a6:7b:1f:b0:8a:c5:c2:75:73:70:27:d8:c9:e6:71:91:af:60:
90:9b:0f:37:7a:1e:77:4a:0e:d9:5a:cd:0a:98:5f:db:5a:5f:
88:44:89:b7:b5:b9:ca:73:ab:83:01:9e:a9:6e:07:d0:11:9e:
07:5d:9c:2f:5f:dc:8f:7e:d6:fb:08:9e:d0:bb:d4:0c:55:1e:
c3:97:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:18 2025 by rpki-client