Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: yIeFcwraEZH1Oq7C+yU2Z1x/mn6Gj7ub4Dn/kWxKQZ8=
Subject key identifier: 4C:7D:49:05:DE:04:AC:11:36:09:27:52:17:10:4F:7A:EC:B9:4A:D8
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0194BBCE9AF3D24F0CF64E9E6FF705263FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: ku4aTAAT9IHIjpPvQlIVcKeyy2MugfXsORqBo4BqcDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9a:f3:d2:4f:0c:f6:4e:9e:6f:f7:05:26:3f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=4c7d4905de04ac113609275217104f7aecb94ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:f2:3f:99:53:1e:40:2a:2a:54:1a:27:7b:
d5:cd:c3:d1:50:0b:87:5a:9d:ae:6a:35:e3:68:d3:
c7:ea:75:64:3f:fc:69:31:ae:e7:88:5c:e8:90:08:
b0:80:62:ea:1c:f0:58:b1:69:15:31:d8:81:f6:59:
13:5f:f9:5b:b0:34:a3:f9:30:d5:fd:43:45:41:03:
ef:49:8d:27:97:b4:19:66:26:af:bf:fe:e3:2f:0f:
5e:bd:46:5b:e2:97:ea:30:d9:89:77:9d:31:e1:42:
da:ff:ac:7a:6f:9d:3f:10:d2:2d:9e:0d:ac:17:79:
8b:90:73:32:46:5b:0d:0a:5d:2b:30:44:fb:92:16:
be:e5:71:98:51:e0:bd:59:c7:dc:ff:55:f7:56:f6:
2b:83:bf:ef:81:c6:e1:88:ee:d4:fc:c6:5a:7a:64:
93:2b:80:65:cf:4d:4a:cc:e9:7c:e0:28:b4:65:78:
82:87:a8:a5:71:f0:51:78:3e:4a:a9:dd:4d:e5:6f:
ad:b7:be:e6:6d:1c:1c:37:a1:93:54:06:30:81:82:
16:d2:32:ff:16:dc:91:25:82:58:63:3e:8c:af:34:
d9:fc:4b:e5:4f:8d:24:4a:a3:ff:e3:cf:e6:aa:0c:
75:dd:7f:ba:70:20:a3:2e:00:4a:7d:16:23:66:b8:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:49:05:DE:04:AC:11:36:09:27:52:17:10:4F:7A:EC:B9:4A:D8
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ba:0c:fc:70:24:ba:34:fe:56:46:9e:8e:71:1f:ab:63:ca:
05:1f:63:3a:c8:ba:58:bf:44:76:82:7c:88:d1:bf:7f:df:5b:
8d:c5:b7:9c:b7:18:29:30:94:8a:dc:81:d5:2b:5d:28:f1:c4:
5f:f9:56:ea:de:cf:2f:5a:c2:5c:04:57:ef:10:ec:04:57:e6:
72:3e:04:80:45:cb:06:44:b2:eb:47:d4:1d:db:13:6c:57:3f:
af:38:73:3f:d0:63:fe:c6:85:ac:8f:0b:20:42:9d:0a:9b:56:
31:7e:74:6c:ad:b5:4a:2f:59:40:f1:1c:3f:da:04:0e:98:9d:
ef:78:a8:e6:26:02:f8:5a:01:c2:e1:7d:90:9b:c3:01:a4:b7:
60:75:6f:6b:64:18:05:40:7c:6b:89:31:12:36:ca:a7:c0:a5:
9e:8c:5e:53:2c:a2:37:98:cb:4f:d8:78:97:93:a5:99:bd:9c:
4b:b9:39:aa:38:a7:37:3e:86:f2:de:e7:6f:ba:47:7d:f1:00:
8d:18:a9:eb:e8:3c:72:b3:ab:60:57:b2:a9:c1:09:e5:77:1f:
d4:7c:10:8d:d5:5f:ac:b8:97:41:02:d6:13:b8:bf:5a:24:05:
ec:03:e8:76:13:29:76:d4:d5:70:14:b3:1b:95:31:43:4d:32:
30:51:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:19 2025 by rpki-client