Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
File: q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft (raw, json)
Hash identifier: x4CtkMLk5b/7cCekmylr6dbf6fuymWoz09V8zfHKISc=
Subject key identifier: 97:D0:7E:27:EF:A8:64:B3:B2:17:57:EF:8F:DD:77:84:48:CC:A6:54
Authority key identifier: AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
Certificate issuer: /CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Certificate serial: 0194BC3BC70288F466527A0B07FD0129118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
Manifest number: 0A1D
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: 0SSsSk3JYtZfVKoUdIXep-skUls.roa (hash: lo1rRlcKmSiP/o5fsPXMsNzyze1q/0lfZDjTXaH15HI=)
2: q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl (hash: Muoox0p1e7qLVdf1jvfkSA3TDmtAyY6er4Gt3JnLrCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:02:88:f4:66:52:7a:0b:07:fd:01:29:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8520ec83e30eb7938b8002f470f0d1c505c451
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=97d07e27efa864b3b21757ef8fdd778448cca654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:e1:45:e9:37:bb:e7:72:73:1a:e0:09:1c:
2d:c2:53:1a:65:a8:88:62:8d:0d:13:c6:01:2c:cb:
c9:62:ce:f0:8a:0e:6f:af:62:b5:59:14:fb:a0:df:
56:60:76:54:e1:31:64:8b:14:c1:42:52:86:df:2b:
21:30:8b:30:54:54:7b:5e:61:00:76:5e:e5:4b:20:
0f:a0:88:0c:e0:84:4e:71:00:27:2e:68:1a:18:5e:
3c:20:fc:be:da:41:55:1c:7b:55:6f:5d:e6:b7:e7:
64:76:d5:0c:3a:9e:8a:03:fc:65:0f:f6:1e:96:57:
98:70:af:06:b6:98:c2:31:fb:7b:b5:ef:dd:3c:33:
e3:03:06:43:89:99:90:a8:ee:d4:99:d8:0b:b4:e4:
1f:8b:3f:a2:87:c6:db:ce:ea:b6:4f:74:b9:33:37:
35:96:d6:c9:ae:0c:29:f0:11:72:7d:2d:ea:88:b8:
29:63:bf:f3:d1:15:b6:5c:70:d6:06:fb:9e:a5:1c:
1c:fc:7f:b8:f6:9f:5a:d1:74:7c:85:87:3b:bc:f0:
7c:58:5f:37:dc:e5:e7:6c:f0:a2:89:d3:5a:23:89:
3a:76:88:d5:97:f6:75:26:65:41:cd:99:ca:69:bd:
1a:55:a7:91:ca:a6:74:23:e3:8b:bb:af:99:57:fd:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D0:7E:27:EF:A8:64:B3:B2:17:57:EF:8F:DD:77:84:48:CC:A6:54
X509v3 Authority Key Identifier:
keyid:AB:85:20:EC:83:E3:0E:B7:93:8B:80:02:F4:70:F0:D1:C5:05:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4Ug7IPjDreTi4AC9HDw0cUFxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/faea65-90b4-46db-beef-84b473b9ebcd/1/q4Ug7IPjDreTi4AC9HDw0cUFxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:03:45:97:2f:a1:df:02:36:26:c3:93:5b:b8:47:53:93:18:
6d:e5:d9:4b:ba:6a:62:5c:b5:b8:75:c5:4b:20:22:63:9e:3b:
18:4e:24:15:52:13:f0:84:47:2f:c0:9c:84:7c:85:04:c6:49:
cf:de:5c:8b:f4:b8:f9:73:af:ba:f5:96:53:27:12:56:be:d0:
d7:e4:a0:3b:e3:84:9d:d2:a9:44:69:2a:18:02:d8:81:2e:77:
48:5b:3f:86:c0:ec:5b:38:55:fc:a2:59:09:da:47:b0:27:b5:
ab:c9:29:f8:fb:9b:73:61:24:fc:fb:08:e7:5a:e1:e6:89:b1:
39:ca:63:bb:6c:6e:19:3b:22:ab:89:e5:cf:0e:ea:6b:39:3d:
95:e8:e2:0c:a5:a6:ed:06:88:d6:18:7b:0f:e9:98:b3:cb:39:
55:68:77:ce:54:4e:fb:d4:c5:da:53:a9:aa:13:8d:86:ba:dc:
d1:36:ee:fc:22:6d:0f:ca:ec:0b:19:61:48:b0:ef:79:4f:31:
3a:56:69:46:f6:72:13:9c:4f:e9:e2:6b:62:4d:4c:a9:27:73:
7c:86:ca:1c:ce:42:f6:8e:2d:f4:e8:77:a6:ea:c0:fd:aa:e2:
1b:c8:0d:0b:ba:72:16:cb:9d:32:4a:6e:e9:44:a7:37:f9:8a:
18:72:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client