Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: SS4DC1SIcvXEE+IbhFKig/XGUyBIN9yiD+6y6PlbgsA=
Subject key identifier: 6B:38:44:69:93:A4:B3:C7:53:74:41:D3:3D:8D:7C:D2:71:C2:FF:E0
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 0194BC3C1D841FCE4F2690A428E223B4A841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: HCb/JtKc8B9IK5bxO+Ao48u4SORwJFIzf40VDpFcKgY=)
2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1d:84:1f:ce:4f:26:90:a4:28:e2:23:b4:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=6b38446993a4b3c7537441d33d8d7cd271c2ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:9e:d4:5b:d4:9b:87:d7:38:e0:fc:85:e8:
24:f9:f2:b8:c0:d3:1b:0c:da:2b:78:1a:b9:33:a5:
b5:89:2e:f4:8a:9b:5a:ce:17:d6:e6:d5:85:15:d7:
99:35:b6:54:87:d9:e4:df:bd:8c:c9:b1:83:a2:06:
48:8d:5e:6f:c0:36:15:96:ac:56:ba:49:59:21:f3:
78:bc:79:fb:7c:b8:22:0a:2e:5c:5d:d6:6b:3b:02:
3c:63:f1:54:39:8e:70:b6:bb:b8:2c:69:54:b9:1f:
ae:3d:37:d2:cd:a5:ad:b1:79:73:94:6c:a4:c7:f2:
bb:e2:5c:46:b5:de:8f:82:8e:93:14:65:8e:29:62:
59:1c:bd:f8:fd:17:52:2b:6d:be:af:93:13:91:ed:
e3:39:6c:19:fc:d8:cf:91:d1:ff:ee:43:aa:81:b3:
f7:5b:ec:12:2c:44:2a:d6:0b:4e:38:a1:39:07:20:
60:8c:43:17:8a:31:c5:b0:31:ea:02:99:5f:de:df:
3d:56:5c:f3:c5:73:0f:3f:dc:8d:8d:cb:cf:8a:f6:
7b:ad:db:b1:65:ae:5d:89:c4:ec:36:d1:5e:7f:fe:
21:97:4a:b5:c4:5b:b2:fd:cc:b0:17:dc:11:1c:ef:
da:1e:f2:6f:6e:95:aa:a9:e6:69:c7:e4:2d:e1:16:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:44:69:93:A4:B3:C7:53:74:41:D3:3D:8D:7C:D2:71:C2:FF:E0
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:10:00:2c:66:2f:f0:48:55:0f:df:84:bf:82:2f:4a:5e:67:
20:c8:11:c8:2d:7f:6e:69:76:1e:dd:7f:74:03:fc:a8:52:9a:
04:60:29:c5:73:3b:a3:ab:76:46:02:5c:64:fa:cf:66:56:0e:
69:49:92:49:f1:ee:94:e5:da:63:3f:0b:39:f9:50:62:eb:77:
a2:82:d5:16:9a:1e:41:1c:b9:39:eb:a1:df:9a:fb:13:7a:3e:
23:e7:7b:e0:ec:19:a1:94:af:eb:af:93:fa:00:f5:58:85:e2:
cd:1d:d8:a5:24:44:bb:67:75:d6:b1:1d:30:1d:3c:b8:92:e7:
c7:c3:df:d1:f2:8e:12:a8:58:80:13:02:9f:af:62:ca:8d:17:
e5:c3:c9:e9:ab:62:28:7b:30:9d:17:0f:fa:9e:e8:95:62:04:
b2:00:39:cb:d3:33:d4:ed:49:8c:4e:87:73:23:3f:02:18:5e:
72:e6:b2:34:a7:9b:08:cd:ce:47:9d:64:a1:46:3b:72:f3:84:
e5:e1:2a:8e:7d:e2:19:e5:bd:df:6d:e6:1c:76:47:d9:0a:c0:
90:f4:4f:fe:af:b9:4a:9a:5f:7b:e1:7a:dc:bd:8a:04:df:c3:
93:9b:0e:da:6f:95:27:55:f0:ed:5f:dc:f1:ee:34:07:a2:e9:
6c:39:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:59 2025 by rpki-client