Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: CRs3cyIY8U1P8UZsaig9v4oxKKyKQOpgcFazdObg4xg=
Subject key identifier: 41:6F:4D:D3:F5:09:44:D8:58:BB:93:DB:70:B6:6C:C2:C6:2C:68:6B
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 0194BD177DC6A4D5C19EAC592FCCF3B5AE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: F5rVTldR33/+2A5OqT83SQ6yZ3JQYFUb6nXk1EeM50g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:c6:a4:d5:c1:9e:ac:59:2f:cc:f3:b5:ae:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=416f4dd3f50944d858bb93db70b66cc2c62c686b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:29:a2:d2:d6:46:5d:cb:50:6f:bf:12:e6:
68:82:16:e9:5e:96:0a:34:fd:34:2c:8e:e2:99:14:
af:73:4f:87:0e:55:dc:ac:66:a8:83:9b:f1:4e:ec:
81:e9:54:13:d1:10:aa:4f:86:b7:f3:be:3c:fb:da:
df:a7:5a:2d:c5:b4:9e:d6:b3:66:64:c9:4f:05:bd:
11:85:08:7d:80:ac:3b:a3:ec:ca:c2:10:19:82:90:
5f:a3:63:c6:52:fa:46:a7:3b:4c:6d:40:a8:bc:54:
80:b4:c5:50:c9:33:e1:26:92:50:e3:e9:be:36:6a:
dd:a3:99:f2:3d:30:58:b8:b1:cc:42:d8:8d:3e:f5:
de:d5:12:ac:ba:b6:3f:39:b1:0f:04:83:4d:f2:ec:
a4:e2:39:45:4e:da:b3:12:08:da:1a:0a:9b:44:ae:
71:ff:dd:53:7a:51:ed:97:72:d2:66:52:6b:5e:e1:
2e:d6:a6:93:47:a2:7a:1a:dd:d8:96:10:de:5e:b9:
b8:51:52:db:5d:13:01:d3:92:de:8e:5b:de:d8:1f:
41:34:e5:0e:ae:8a:60:fd:03:f5:84:3d:b3:a9:9c:
cc:23:6c:e7:86:45:04:ee:e6:f6:03:50:a5:59:fa:
93:d0:73:ab:73:4d:c0:7d:e0:b8:19:dd:22:28:41:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:4D:D3:F5:09:44:D8:58:BB:93:DB:70:B6:6C:C2:C6:2C:68:6B
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e2:fb:59:b1:57:da:9f:7f:ce:4b:a6:b5:4d:59:ef:7d:dc:
e8:e8:c3:26:0f:cf:c5:7d:e2:1d:b7:65:92:5a:6b:9f:66:a0:
e9:2f:0b:c7:00:75:41:08:56:89:af:b0:48:a5:89:b4:ae:cd:
7d:c9:24:bd:5b:b5:f2:8d:66:02:63:a6:4b:95:db:f4:73:87:
c7:f7:61:60:ae:8a:72:34:82:46:50:61:f5:89:d2:98:18:4e:
df:4a:7d:60:3e:ba:49:2c:0d:86:69:62:8f:29:7e:48:fb:69:
dd:d8:2f:f2:a5:d8:92:13:10:a1:e9:35:01:2a:65:a9:5e:2f:
06:1a:cc:4a:a5:e0:55:34:9a:00:2c:a7:70:9d:09:e6:9d:61:
8c:cc:66:70:22:1e:86:8b:2b:31:e2:d8:16:f2:5f:38:d2:c3:
c3:2a:f7:02:46:3d:82:4e:f1:0e:ed:59:73:48:13:e0:7f:bd:
76:2d:35:23:98:6a:80:7b:b9:84:c4:c7:8c:f6:0d:e1:e9:4e:
ce:0d:f7:9a:f5:f0:a1:9f:66:4f:f9:12:10:99:62:e1:6f:25:
45:da:50:a9:0a:0d:a1:39:be:cf:80:48:85:21:83:4c:ed:9e:
54:48:82:84:31:97:d4:d3:a3:b7:1f:5b:f6:63:7d:d4:39:28:
6f:8f:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:57 2025 by rpki-client