Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier: g3l2Ho/k0/WLPyRcXjzCU7kFVSr19klNx5or7IIUwXE=
Subject key identifier: 53:CE:88:17:A9:89:A8:94:A6:DD:D1:50:6D:33:C5:ED:C6:AB:A6:B0
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 0194BD4EC3C9152335A18866CF1710138E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number: 07CF
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
2: 9Ahx80pbKuxq2Y2zQQGlzVkFvSE.roa (hash: jZsow3febERZylEEbhS1HJlyFdjV2wAsubJNdWS00Js=)
3: SAABZkEQbTfeoiZylh7IAj2UKJY.roa (hash: tT5S9auXfqJCWExDbLcMxXWvB7zI8R71Em3Ix9poLF4=)
4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: Zo1KQj8sPA/JfxDFP30h7zg0IFsoOQB7ZHzVLxaoG3M=)
5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c3:c9:15:23:35:a1:88:66:cf:17:10:13:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=53ce8817a989a894a6ddd1506d33c5edc6aba6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a8:06:df:9b:1c:02:a7:d0:14:23:0d:49:df:
f1:e6:eb:0f:29:e5:54:9b:37:3d:1f:03:50:45:90:
52:61:78:f6:5b:84:e5:6f:b2:37:15:9c:b6:73:5d:
79:bc:5b:07:fe:e6:01:57:3e:01:fe:5d:65:5f:85:
20:9a:9e:8e:26:f7:89:76:4a:75:f2:36:51:87:16:
99:43:dd:d1:02:cf:f1:b1:2c:a2:c5:05:c5:b0:55:
f6:a8:c3:e9:35:d7:c4:c4:ee:13:76:33:d8:e8:4a:
ba:f0:7b:cc:c3:e2:b1:58:79:2f:cc:d4:74:16:8e:
ed:a8:84:25:16:ff:12:6f:67:a1:22:1c:2b:87:46:
1c:8f:7f:86:57:b6:79:c0:0e:b1:03:b6:2c:c3:28:
1b:e4:55:80:0f:bd:be:60:85:71:b4:b1:ff:9d:c5:
b1:c6:9d:d1:1e:c6:52:fd:6d:c8:2b:ee:41:b9:1b:
33:95:8a:a0:0e:88:6c:ee:fc:2a:e6:1d:d2:23:8a:
d9:c1:e6:50:af:9e:3a:ba:fe:0b:5a:d6:68:6a:75:
61:82:58:94:f4:7f:72:21:7d:6f:95:2b:57:e9:a8:
9d:ba:c3:18:30:65:02:05:56:3e:31:03:3f:75:89:
60:83:62:40:65:a1:d1:70:35:b8:c1:c2:b0:6f:6f:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:88:17:A9:89:A8:94:A6:DD:D1:50:6D:33:C5:ED:C6:AB:A6:B0
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:40:bb:45:9e:42:6d:6f:ac:6d:b9:21:a0:2c:4e:c0:9c:
cf:b4:a1:9b:f8:e2:c1:53:f8:9e:00:e8:be:14:97:3e:44:f9:
88:54:77:09:bd:78:3d:dd:5d:2d:25:0c:af:6f:a5:30:57:ba:
f9:5e:a6:5e:5f:07:57:91:36:22:c2:be:bd:c7:43:2a:e6:3e:
31:86:8d:8a:b0:d1:ee:d0:d4:1f:c5:dd:56:28:0b:b0:cd:ce:
7d:79:fc:64:e4:e8:55:5a:6a:60:ab:75:ac:30:01:41:fa:4b:
7e:f1:bc:87:66:fa:06:7e:3a:24:9d:71:f1:86:c1:4d:d4:87:
34:f5:a7:cb:38:e4:70:57:ad:5b:f8:30:15:7e:c0:20:4f:cc:
f7:6d:fa:c5:67:8f:28:0a:5e:7c:fa:d4:3e:91:9a:70:24:06:
8e:bd:2a:23:d0:b9:f9:f1:aa:93:76:a9:58:d1:70:0b:dd:73:
93:58:11:f4:5d:b0:d8:46:34:4b:47:bd:b3:fc:b4:4f:16:6f:
fd:cc:04:f9:98:94:8d:18:cf:8e:89:ff:ea:63:f6:95:04:b5:
78:9d:8a:82:06:1a:4c:02:54:12:ed:0b:31:dc:da:9a:c3:2c:
86:f5:6d:e1:c2:6e:0f:89:65:b2:02:b9:ac:db:4c:1f:14:1b:
30:6d:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client