Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: FZ3Rqs2w7/276H/Of0BxOJ9LFXuhq5HDO3gBhXq8B54=
Subject key identifier: 3B:6E:33:FB:14:27:5B:7F:A9:D1:F8:30:DB:18:74:DF:39:F1:3F:DF
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 0194BC3C2EDA823185CD3F062B882DCAEB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: 7ilBmbhHstv3n/2F3/7O0m+uVOMesmQ85zf3EHZ7TGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2e:da:82:31:85:cd:3f:06:2b:88:2d:ca:eb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=3b6e33fb14275b7fa9d1f830db1874df39f13fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:cd:15:92:db:f2:63:7e:55:c3:50:b5:ed:
9c:6d:bd:1f:2e:b7:07:21:cb:46:ca:06:05:e2:90:
61:f4:2a:9e:6b:3f:cb:a6:e8:65:85:12:b8:f9:e4:
f0:09:39:84:67:5c:38:9e:37:22:33:18:fa:05:4a:
c8:a0:d9:c7:2a:27:05:e0:01:8d:24:8f:25:d6:81:
19:45:3c:7d:85:21:2c:56:2d:f6:0b:db:22:2d:3f:
1b:3e:85:03:63:1f:35:61:8b:d5:9c:c5:b2:18:e1:
31:04:10:88:d8:30:1a:9c:d5:38:0a:da:4c:a0:88:
a1:7d:fa:55:0d:6a:42:22:57:62:5a:fa:cd:59:57:
96:7a:86:eb:b8:09:58:be:9e:b2:64:86:28:a1:b8:
92:77:17:0c:e6:4e:f3:15:5f:f5:03:f4:45:be:b4:
7a:94:c3:53:f5:17:8a:dc:7c:96:c9:aa:c5:35:53:
3d:53:cc:33:ff:70:e2:fe:b5:60:92:52:ed:fc:ec:
3f:23:52:0e:1a:10:eb:5f:b8:66:fc:8c:aa:1c:85:
71:a8:d1:9f:11:a1:74:5d:e9:db:dc:bf:95:2b:4f:
bc:93:dd:db:8d:21:15:76:15:62:06:34:40:79:e5:
f4:ad:da:1a:20:7b:66:cf:4f:76:7e:42:91:cb:01:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6E:33:FB:14:27:5B:7F:A9:D1:F8:30:DB:18:74:DF:39:F1:3F:DF
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e5:3e:65:f7:28:4e:26:a7:d0:f7:92:e1:23:2f:86:f5:71:
79:07:5f:85:02:a8:5f:e6:5e:8a:f1:7d:f8:1e:90:c6:07:e0:
54:6e:ec:39:7a:52:ca:03:b6:f8:e6:b7:db:f4:e9:bd:30:8d:
6d:df:f3:fe:bd:19:da:f4:cb:a5:bb:ac:3a:ef:79:ee:3a:27:
c6:72:7d:8c:70:71:ca:fb:83:00:db:28:cc:ef:16:e1:11:b0:
98:12:e0:17:69:62:34:b9:34:3b:4f:d9:ff:28:20:54:9c:7c:
9f:b9:d4:a4:a7:55:b1:65:a7:b5:9a:e3:c6:5f:28:a7:a9:91:
09:2f:a3:2c:a2:bb:a1:b8:27:b2:41:f9:1a:12:f7:6f:4b:08:
61:19:d9:f3:36:08:74:c8:7e:66:66:e6:10:5b:a1:dc:9e:11:
9d:47:cb:a9:bf:93:4e:20:50:7b:55:13:82:04:65:f7:ed:45:
2b:f0:40:bd:a0:32:bb:9c:b2:2d:35:35:aa:08:64:d9:53:77:
79:bd:fb:93:12:0f:ac:77:82:60:9f:89:d7:f3:53:6f:f4:32:
ea:9d:75:68:b4:62:08:7d:1a:34:be:63:cc:bb:59:38:12:6e:
e0:65:07:76:89:1b:ae:35:03:e0:8f:5a:10:cf:dd:f4:a3:d8:
96:59:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:08:06 2025 by rpki-client