Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: EMUsdNpOXeBo0XLC0qsTHop0S7Js1MmwyLRcPpdL1/k=
Subject key identifier: 23:27:57:0D:20:65:47:5D:04:EE:19:AF:C5:DB:59:44:A5:3B:D5:7F
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 0194BC04BF8E52763DEAB4B4EE1B4C368980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0C19
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: XYrxsn0wpdzWid6vHEDwJ2YoUw20YeB1tNq8UZEIIYY=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:8e:52:76:3d:ea:b4:b4:ee:1b:4c:36:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=2327570d2065475d04ee19afc5db5944a53bd57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:ec:0c:b0:47:67:4b:12:08:86:8e:f7:20:
8d:48:e0:73:9b:68:d6:3f:0a:98:0e:bd:b8:bf:09:
ef:34:3b:81:96:9c:d9:b2:7a:54:ad:9d:d9:c4:3f:
a8:33:20:cc:41:b7:d5:2c:c4:98:22:90:2c:e6:90:
ac:c3:10:07:8c:e3:19:be:7c:ab:4f:8a:6c:e6:86:
35:2e:39:9b:35:87:79:ce:69:f6:f8:01:6f:30:a6:
c6:f0:a4:a9:50:b3:62:ad:b7:83:19:2f:3a:d5:1d:
16:bc:03:cd:57:f6:9f:6d:9f:cf:37:8e:d0:ab:db:
8e:a3:c4:95:58:a5:67:c0:4e:c6:72:34:70:f0:bc:
d1:29:43:be:5d:8e:ce:2d:27:54:4e:de:35:5b:4f:
58:36:c8:6d:5b:f9:53:c2:cc:9c:13:69:b7:05:f6:
98:d4:4c:1a:55:46:f7:47:13:60:c2:cc:9b:ac:18:
c7:33:e5:de:05:27:14:11:d0:2a:8c:f1:81:b2:a9:
68:47:a9:4d:11:19:fa:71:5a:bf:1c:0a:0c:4b:94:
86:38:ba:41:0b:91:86:61:01:90:f6:4d:6c:c3:40:
0e:93:3e:73:1b:52:9d:cc:fc:57:d5:66:c2:78:c6:
f7:f2:02:6d:bf:3a:f1:93:73:19:8f:3f:74:bf:8b:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:27:57:0D:20:65:47:5D:04:EE:19:AF:C5:DB:59:44:A5:3B:D5:7F
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cd:57:e1:72:e3:22:6c:1c:99:1a:82:f7:b7:30:3d:cf:ec:
ed:08:f7:b4:1c:b6:06:22:d6:75:73:da:48:28:78:da:1b:bd:
4a:75:49:b1:2b:c0:e2:8a:54:4c:ad:86:ff:40:e1:2d:5c:87:
4d:b4:7b:cf:a5:fd:71:c9:5f:a6:18:f4:a8:1d:eb:86:a0:34:
a1:72:15:12:ce:62:57:8e:e5:0c:92:b9:a8:77:33:d8:65:06:
91:36:9c:35:9b:0e:38:82:52:4d:26:22:8f:1d:1c:31:a1:86:
65:52:c5:22:fc:e0:5b:7c:07:f1:aa:df:c6:ba:86:74:ce:94:
5c:16:2e:58:6f:07:04:6c:90:d4:72:28:53:7f:3b:c3:95:64:
c4:6d:4d:6d:4c:65:dd:82:ec:2d:63:37:86:bd:16:39:b3:a1:
22:45:f5:07:8c:fd:dc:b3:62:11:1d:87:2b:4a:16:ec:f9:30:
46:d2:d4:ca:7c:aa:e0:24:3c:1d:cd:e6:ea:59:8f:64:84:29:
55:d2:61:e4:1c:73:a6:89:58:b2:4c:0d:9b:90:72:5d:cf:37:
de:66:ab:fe:51:8b:00:d4:be:3f:88:43:5c:bd:c4:52:fa:c4:
ce:80:e3:66:87:a4:6e:40:22:44:25:7a:9c:67:a1:52:4d:cc:
85:13:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:07 2025 by rpki-client