Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: QOLSKYp/5UFjwr0EIw37iIRuVZN617kWoMQT1OmUunk=
Subject key identifier: 2B:A5:1A:1A:2B:91:F2:8D:22:DB:EB:B2:E4:26:56:9B:45:10:9D:12
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0194BC3C49A5DF431DD7F65AFF2F1763F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 8F
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: Bh5PdHziQpZxhseDFY3eZBn9qPCXCzQ/IwOMEiC9m1o=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:a5:df:43:1d:d7:f6:5a:ff:2f:17:63:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=2ba51a1a2b91f28d22dbebb2e426569b45109d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:35:4c:5b:2f:02:18:2e:da:95:81:5d:9b:
0e:7d:1b:7c:c8:0e:af:94:ae:70:7f:7b:91:30:3b:
dc:12:23:ed:92:e6:23:0c:95:84:2c:01:62:2f:93:
4d:d6:28:b0:6f:d1:b0:4c:ba:3c:da:ce:aa:e1:7a:
6c:1d:3f:15:f3:21:56:b4:31:17:1a:1f:76:e5:88:
e5:d8:54:62:0d:bf:86:76:38:54:41:27:0f:7c:11:
36:d2:43:99:0b:e3:79:91:ac:7a:36:01:eb:0f:88:
cc:ad:43:c1:37:9a:fa:d3:5c:8d:19:87:58:12:e8:
67:a5:98:e2:b1:6b:c8:0d:4c:76:ed:26:79:a3:96:
43:03:f8:03:eb:42:07:37:68:53:d0:a2:a6:73:70:
43:81:a9:c7:2b:f1:d2:e0:fd:5a:2b:4e:bc:e9:7e:
b8:b7:0b:6c:5f:49:13:f0:48:0d:86:29:3a:66:bc:
31:13:f5:46:96:73:2b:12:86:2f:4e:07:fd:56:63:
c7:1c:66:64:c5:28:66:17:02:20:ec:56:ac:04:1c:
8d:93:d7:3a:6f:86:6b:a4:52:82:cb:17:24:10:c5:
07:35:3e:48:06:26:98:5b:ab:b3:8b:61:1d:2d:7c:
da:b1:d9:6e:43:6f:e4:44:b2:f0:65:b5:64:aa:48:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:1A:1A:2B:91:F2:8D:22:DB:EB:B2:E4:26:56:9B:45:10:9D:12
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:8b:fc:31:82:ba:30:f2:d2:ab:11:27:e6:85:bf:46:a7:
6c:2f:e5:0d:17:59:d7:ab:54:3b:6e:72:10:96:67:f3:eb:bc:
20:00:fc:fd:98:c7:30:d9:b8:3d:90:02:e8:75:67:6f:c7:ae:
d3:7e:34:e6:bf:3a:c6:d7:45:12:0a:46:ca:c3:b5:43:3e:00:
24:13:c0:b6:1c:fb:cc:72:bf:8b:ae:76:c9:0e:b8:c7:17:32:
bd:39:75:c2:55:e2:80:c6:9f:23:79:66:6c:73:43:11:5e:67:
af:26:3c:12:3f:2b:83:dd:51:9c:a8:e6:b8:4f:06:a8:89:8e:
6f:8b:d3:8d:11:b0:c9:01:43:cc:5a:8f:ac:03:04:6e:0c:dc:
5c:55:b0:8a:26:e6:c5:a0:7b:c6:2d:a3:9e:d7:fd:fd:54:05:
05:71:4e:70:dd:4e:0b:a9:4a:0f:39:d8:c7:80:e4:d3:49:e6:
be:e4:ed:6c:30:45:0f:42:e0:4f:50:ec:a8:77:fa:4e:73:c5:
62:75:e4:bc:46:b1:ad:0b:67:06:b4:02:dc:7f:21:75:07:15:
00:70:ea:ee:1d:43:79:c6:de:12:5b:cf:53:6e:d8:ee:b4:89:
36:38:c9:6d:91:3b:0c:c8:dd:13:66:f7:8a:0d:85:38:68:17:
72:b2:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:39 2025 by rpki-client