Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: g8o7bAx3Ene7XTqLQLUKVVONQo5YommNEIymJFx6Qh8=
Subject key identifier: F0:9C:60:F8:DC:E9:0C:9A:F4:7F:EF:51:DA:0E:AB:80:47:CB:90:AB
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0194BC72D8E63CC75531D7A5CF917DA2827A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: lbLHqJCXaq3Djk_FkjUlq9Twnac.roa (hash: ADunFMPOdeJyHQJy1AS2CzNNz6sHD1kZHoLqPBwuc64=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: YesQjtg9X8cwxrFR6WsmgX+QfssnEIgkSvTB/Ok7Ces=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d8:e6:3c:c7:55:31:d7:a5:cf:91:7d:a2:82:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=f09c60f8dce90c9af47fef51da0eab8047cb90ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:97:dd:41:b0:81:e4:5f:c6:55:3c:66:61:
d8:af:48:6c:57:bb:cf:7e:8b:04:29:f6:7e:02:23:
9b:29:f3:d6:6a:d9:74:73:4e:24:cd:11:e0:7c:c7:
6d:36:94:bc:c7:87:b1:e2:72:92:b0:10:eb:e6:35:
53:90:40:ff:31:54:e2:46:c3:35:e0:cf:1d:b0:55:
71:86:b4:ed:d5:4c:27:ed:e5:0e:a2:3e:a2:76:f8:
26:54:85:6c:f8:9c:ff:7e:99:d6:d4:c2:1d:67:65:
5e:be:98:0d:88:eb:78:e8:65:2f:21:c9:66:a6:09:
69:2e:a7:9e:4e:60:c4:02:e9:81:a0:52:97:85:4f:
e0:4c:5e:bd:d9:4c:0c:d8:f1:1a:e6:ef:92:a7:42:
5a:b1:f1:0b:92:67:e1:10:1b:48:12:d6:44:59:e2:
8b:e8:92:e8:2b:7d:03:c8:4b:2a:96:2f:eb:b8:0e:
d0:c4:16:be:1e:b0:b5:a5:fd:ce:20:37:cf:71:28:
b0:8d:3e:12:7a:02:e9:61:0a:0b:f9:1c:ff:fd:f3:
45:07:96:c7:ab:7b:98:6a:06:64:c2:f1:97:00:3d:
55:26:fa:21:c7:42:37:ec:e6:dc:af:40:37:94:97:
f6:9f:ed:13:b7:25:62:eb:f7:e8:ea:40:fd:cb:d1:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:60:F8:DC:E9:0C:9A:F4:7F:EF:51:DA:0E:AB:80:47:CB:90:AB
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7f:e7:bb:04:1b:fd:ce:1e:b8:0e:20:3d:95:4f:4b:63:b2:
61:1d:1e:81:f8:7d:00:4c:a4:b8:8d:61:2e:1c:17:fe:2b:af:
f7:34:60:5d:9a:e3:4d:1a:35:e8:99:48:c4:df:6d:1b:70:be:
9b:78:b2:02:28:f4:68:66:9b:af:bd:13:77:d1:2c:44:43:f1:
29:2d:e1:b6:f5:ce:50:17:2a:af:1d:89:fc:82:08:ba:a9:a7:
fe:3b:81:2d:c6:fd:0e:8f:63:ac:46:d5:66:33:5c:d6:48:3a:
68:6d:1c:a4:26:ec:cd:b8:86:e5:75:75:12:4c:2b:b5:dd:39:
a0:5e:b2:c5:6e:60:6b:63:e3:48:40:39:35:88:62:29:56:dc:
f8:b1:48:dd:bf:fa:0b:3e:5a:8a:01:73:a1:68:ac:95:12:f4:
02:d0:46:a4:6e:0d:70:20:8d:24:d4:10:be:68:1b:87:8d:3b:
46:48:48:f7:ed:b3:70:ec:4e:01:53:1c:a8:87:3b:e2:b1:d2:
03:34:4a:c6:ae:18:bd:71:0e:7f:76:30:51:79:5c:c1:95:96:
27:ec:e0:52:80:24:8d:5d:91:ae:9f:88:94:20:72:d8:c8:c2:
38:66:e7:b0:43:64:b2:ce:76:12:7d:ea:d7:bc:e3:0a:6a:96:
a1:bc:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:39 2025 by rpki-client