Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: LvbBaeAvpVH1XvtM9ye/ZAjHPZFFsw15qJqNvkxMfZY=
Subject key identifier: 5E:85:F7:1F:B0:A0:48:D6:C0:57:AD:8D:1A:B1:1C:39:27:59:5F:3A
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 0194BD17A7F45C5C571ABC2E6D3F37BDBA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: 7H1BJx16pV4gAZuH8E+ZDdKYzSZV1Elw8jhZmL0hvZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a7:f4:5c:5c:57:1a:bc:2e:6d:3f:37:bd:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=5e85f71fb0a048d6c057ad8d1ab11c3927595f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:b6:37:42:5a:11:53:d3:11:20:a9:03:8d:
33:61:a7:44:38:6f:d7:00:d9:9a:aa:ea:58:96:2f:
a0:5e:f8:6b:4a:b2:a5:cc:b2:1f:77:fb:97:65:b4:
41:1d:f0:fa:eb:41:83:25:b5:45:1e:e3:f0:fc:09:
10:20:f8:1b:19:0f:46:c5:53:13:b7:a5:0d:d3:6c:
65:ba:4b:06:57:c8:96:49:3d:f6:63:d4:b1:2f:d2:
bf:13:cd:a6:24:47:4c:7c:83:ad:d0:85:6d:24:bf:
df:db:52:8a:6e:e0:0e:6c:e1:4d:a4:9b:f5:81:36:
de:b4:63:21:39:6a:14:19:bd:18:f3:2c:90:44:79:
69:fc:0c:e0:5a:dc:da:ae:f3:8a:c4:61:db:26:8d:
53:07:c2:df:01:73:7f:8d:2a:7b:6b:6f:74:36:7e:
18:f9:82:de:7a:f8:fc:ec:ea:5f:65:50:81:69:21:
cb:6c:98:8e:39:5e:84:99:22:40:9f:a5:e8:27:97:
79:47:65:b4:f6:a8:a8:52:cc:97:e8:5f:e0:9f:60:
c9:66:9b:fb:ca:81:d7:46:30:3d:0c:c8:e6:57:ab:
3f:5b:4d:81:e1:5d:fd:78:92:db:b2:d4:7b:f4:14:
2e:8d:97:7b:37:32:ec:80:98:96:ad:1a:2c:21:a6:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:F7:1F:B0:A0:48:D6:C0:57:AD:8D:1A:B1:1C:39:27:59:5F:3A
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:51:7e:e6:53:1d:08:47:99:9e:88:7b:97:75:20:a0:29:9c:
ec:ce:b9:72:50:fe:4f:00:c7:a2:cd:5a:7d:ff:22:1d:d8:a6:
85:ec:4f:c9:93:7f:d4:46:aa:d1:95:ed:2b:08:dd:a2:8b:b5:
b1:93:a2:b7:81:f9:c5:99:09:3e:bb:22:4a:a0:97:90:b7:1e:
95:32:03:f2:2a:e8:3b:93:ff:2a:2d:19:07:42:bc:27:97:51:
d6:97:70:01:a5:eb:25:5d:04:fb:9e:df:93:a7:e9:86:7f:46:
48:f4:56:c3:cc:a7:3f:b1:67:a6:80:47:42:11:38:9f:da:ba:
a6:8c:56:db:c6:ec:25:ed:23:44:ae:cc:db:2a:bc:95:0e:31:
97:88:c9:2f:dd:83:b9:03:df:05:0d:94:a0:1d:0c:6d:15:89:
a5:34:13:07:85:58:99:93:7d:df:71:dc:c3:cb:8d:0d:2d:f2:
a4:8e:d4:09:89:74:0e:b9:15:43:da:e0:74:4a:17:65:b8:17:
32:cb:e4:fc:f7:1a:fe:47:e7:73:de:b3:3d:fd:7d:ad:f5:e0:
60:3c:98:71:e6:6a:75:07:35:0a:5e:a0:34:f4:0d:94:8f:9e:
ae:2f:55:bb:7d:ac:c7:75:90:f5:64:81:36:49:9a:56:c5:7e:
34:27:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:23 2025 by rpki-client