Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: qs23WvsjSbR22Li0Dymw+i/oCX6JN1aGYgcvyslRlDc=
Subject key identifier: AA:37:41:79:F9:F7:39:BB:DA:57:78:F3:8F:E9:28:42:6D:56:6B:4C
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 0194BCE0B78DF0305BEAFC0BA5F9223F99CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 063D
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: wM6PCc8VjB6hHpr26ZRG7g2OMLzSivaq63d81xB667U=)
2: pOmwZuP6Q-BxWvua_azIxnDrtaY.roa (hash: 1Gh5sWhYQZnz90m+gcSVdtSatfk353c30A4J7Tl7xJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b7:8d:f0:30:5b:ea:fc:0b:a5:f9:22:3f:99:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=aa374179f9f739bbda5778f38fe928426d566b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:f3:95:de:8f:e2:d2:e1:7d:e1:2b:28:8f:
13:82:54:9a:31:e1:ab:07:48:ce:2b:27:71:b8:72:
4c:a1:4a:a9:b3:5c:29:76:a4:8e:b2:12:32:95:b4:
fe:64:09:3c:87:3a:af:7d:be:d6:55:5b:d1:ec:f1:
38:a6:3a:02:1f:1e:44:43:37:52:92:28:4b:ba:97:
cf:cd:5b:fb:84:68:00:f3:7b:44:43:2e:ea:39:1d:
2e:be:5c:75:6a:fa:64:f3:38:9d:9b:91:69:31:2d:
67:6b:5c:a0:9c:4a:4a:86:6e:bc:e0:fd:26:19:ba:
71:98:83:bf:b5:12:23:3b:1f:e4:f4:70:2a:d9:0a:
95:3f:62:68:6d:c1:6d:4e:fc:83:9f:23:0b:8e:15:
20:e2:a8:66:04:f1:07:0d:2f:18:f0:73:6d:f7:38:
05:ac:bb:c7:47:ed:1a:fb:16:26:44:81:2f:fc:fd:
79:ac:26:05:8f:0f:76:d1:c5:d1:9f:ca:bc:71:3d:
e4:8c:1d:f6:a9:e0:e9:7b:b4:79:52:80:81:bc:ab:
d3:c0:74:f2:d8:a9:ee:00:6f:8d:a1:5a:10:d4:5a:
b6:32:c5:c8:c9:c1:e5:60:6e:9c:b7:a6:25:e7:65:
82:d5:60:9e:c9:4c:63:c3:bc:c9:14:96:68:4c:58:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:37:41:79:F9:F7:39:BB:DA:57:78:F3:8F:E9:28:42:6D:56:6B:4C
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:e7:b0:75:0b:ea:e8:28:eb:ae:32:ac:88:27:3d:c8:49:
06:0c:74:da:5d:be:70:34:3e:60:c5:ba:da:14:fe:13:1f:40:
df:ad:76:45:18:18:55:fd:66:1f:3b:ef:24:d0:b3:71:83:fe:
f8:e4:85:db:ac:88:23:ec:9f:c2:4a:d1:78:df:f1:60:54:5d:
2e:e7:74:dd:59:12:9a:7a:01:9d:35:70:90:c7:b8:6c:5c:5e:
7d:31:0f:2c:85:1b:98:56:89:11:1a:1c:d2:99:39:e8:d0:d1:
02:d6:d1:2f:f2:3b:61:0a:97:3f:ea:99:16:d8:1c:a2:db:64:
ec:b8:87:48:d6:3c:0f:74:cb:c7:38:de:c6:dd:bb:24:ac:20:
56:d7:0e:e3:8c:8b:31:36:1c:91:22:d0:64:8b:2d:28:60:e0:
56:ed:35:ff:22:00:b6:5a:1e:ac:f1:1a:a0:22:05:0a:62:b0:
d0:fa:35:24:de:d0:d9:60:02:d8:4b:f1:86:7b:85:70:ce:a0:
6d:42:1f:a6:70:7c:05:88:5a:94:d1:c5:64:9d:40:dd:c4:28:
cf:41:ba:6a:a5:a3:f1:6b:a7:c1:bc:b9:af:ac:ea:e0:b1:f1:
55:aa:f2:ee:9f:7b:3f:13:5d:ee:9e:34:2c:e3:75:b5:82:00:
66:ca:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:01 2025 by rpki-client