Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: bqP3grLF4oGCTbkh7mX/MzTeWZKEahhCFknDqdFpVyA=
Subject key identifier: 2B:06:EE:DC:94:D4:6A:25:47:AD:3B:C0:82:2C:5A:6E:55:06:1F:49
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 0194BD4EB593CAEE520C8DF62E9C23EB9607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 1260
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: RTwgUUN64DWvYeTje/uE1zFIhdpIZQdFufJ48kHkm0I=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:93:ca:ee:52:0c:8d:f6:2e:9c:23:eb:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=2b06eedc94d46a2547ad3bc0822c5a6e55061f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:78:90:78:6a:eb:04:0a:3e:02:8d:aa:3d:
3e:30:8c:fc:91:ca:1d:b9:27:0c:48:56:31:37:65:
28:7b:cc:9a:37:dc:36:88:4a:ce:4f:2d:2a:6f:6d:
80:76:5a:80:1b:2b:18:e6:aa:51:48:fc:fd:68:57:
c3:c2:d5:90:54:9f:e6:a6:3f:bd:21:0b:aa:ac:67:
e5:f9:bf:cd:d0:51:a4:6d:68:45:16:f2:55:5f:63:
bb:62:e6:05:24:a2:de:88:d5:11:b4:0d:2a:f3:e9:
db:9f:0c:65:4b:40:a2:38:25:bd:47:17:8c:26:ca:
5f:b6:3a:02:a2:c3:b0:17:e6:4b:74:07:73:2e:ed:
76:1f:7c:fa:70:fe:da:2f:a5:12:fb:43:6b:f0:db:
04:aa:68:1a:17:0b:df:06:3a:85:a8:5f:0d:e0:dc:
2e:e8:fa:2d:92:63:08:54:50:04:4f:f4:a5:52:1a:
db:1e:f8:65:9f:14:1f:37:7e:b1:6e:b6:d2:be:f0:
b4:ce:5a:a5:37:82:59:e6:b5:83:09:0b:54:61:05:
d8:f6:e4:e0:d2:0b:15:f7:ab:dd:34:6c:d1:54:15:
7d:4a:27:ee:7d:d5:01:a2:1c:44:14:35:0a:33:ec:
66:93:d5:b1:86:ba:33:58:27:1c:58:a2:fe:aa:63:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:EE:DC:94:D4:6A:25:47:AD:3B:C0:82:2C:5A:6E:55:06:1F:49
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ce:96:31:28:0e:6b:9a:29:5e:b9:79:31:f7:60:fb:34:e8:
48:eb:79:0a:ac:45:af:c2:5b:78:2a:45:5c:fd:71:0e:ae:8f:
f3:58:fc:43:df:f3:6a:34:92:0f:37:fd:e4:14:6c:60:66:83:
4e:b2:c3:e4:d5:7c:33:af:34:8a:64:b2:a0:9d:d6:e1:14:78:
89:fc:52:16:d6:ad:2c:ab:cc:9c:0b:7c:cf:ed:22:72:18:f1:
72:aa:3c:46:14:48:f5:35:1d:8a:7d:bd:81:67:99:12:c8:e0:
7e:ec:6a:2c:c2:a3:c3:8f:dd:cd:f0:72:ce:c5:ef:ad:9d:2e:
fa:8d:31:79:0f:ad:96:b2:a6:fe:00:25:5c:35:9b:d8:8f:08:
4e:ad:a9:99:1e:32:20:8f:47:03:a1:3b:6c:f8:20:d4:b8:52:
d3:de:20:53:a4:86:4f:5f:0e:bd:52:1c:33:43:40:75:28:2b:
f7:ce:ea:69:35:8c:58:70:b1:f6:da:19:7a:d7:76:0b:a9:2a:
d4:03:14:24:eb:4c:6f:36:4b:8b:5b:8f:20:e5:90:d2:b2:1e:
5d:b3:35:d8:e5:fe:be:9d:6a:d8:8b:53:36:49:ec:8e:3a:66:
1a:20:f1:19:54:6e:a3:0e:b6:0a:88:cb:9c:5b:cb:96:18:26:
01:1e:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:04 2025 by rpki-client