Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: hOTdLLj32PQCiYqRhrYIIdWrhPCpOgVWo3AiHgRk5vA=
Subject key identifier: 58:2F:C2:35:31:A6:91:08:4C:75:A4:70:C9:5A:11:03:BB:7F:B7:3E
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 0194BBCE73E6A8D3D06C65A346F21642DFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 143D
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: 9nW8ByS54wgkv7ECXYIsIg95ITCIS15D3Nb6wE23Pik=)
3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:e6:a8:d3:d0:6c:65:a3:46:f2:16:42:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=582fc23531a691084c75a470c95a1103bb7fb73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:96:b6:37:00:d7:38:f7:f9:3b:db:5e:6d:
84:44:e1:1f:78:f4:d2:61:bf:b6:5c:5f:96:ab:26:
91:1e:aa:e0:26:4b:39:2e:dc:b4:c1:fc:ce:dc:a7:
c4:36:72:b1:ed:26:88:e0:3b:3e:1f:95:b4:b4:28:
c5:63:5a:1e:68:b2:10:9b:07:94:35:13:76:c6:df:
90:1c:75:76:66:ca:0c:1f:60:6c:7b:4a:88:94:7d:
4d:a4:b8:1d:a9:63:0a:1e:d5:18:4d:1c:65:40:3e:
62:5f:ea:d2:2f:69:23:fc:e5:e0:ec:72:3c:5d:8e:
a7:c5:c1:29:d2:80:24:ba:9b:66:23:7f:45:10:88:
28:23:d2:ef:3b:c1:ed:2d:6f:d0:bb:3d:e1:44:01:
4b:1f:37:e5:db:9a:63:6c:cd:86:57:2e:bc:47:0b:
5b:f6:c7:8f:ab:51:4a:0d:33:fc:84:86:b9:05:61:
00:99:55:d5:a7:16:15:6b:1e:e8:7e:c9:3a:21:9a:
20:c1:d2:f7:57:3c:51:46:73:41:70:cb:5d:c6:e3:
61:83:57:53:11:91:f9:b3:f7:d3:a2:2d:df:99:c8:
a3:dd:6c:7a:bd:ec:50:21:c5:c3:59:eb:8f:b9:d3:
44:0c:0a:58:4e:a7:9d:d6:15:31:f4:17:2f:29:f3:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:C2:35:31:A6:91:08:4C:75:A4:70:C9:5A:11:03:BB:7F:B7:3E
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:66:e9:8f:c0:7d:ca:7c:b1:5a:ee:21:b0:02:9e:ad:00:55:
ba:5c:59:27:0c:bd:41:e4:c2:05:18:62:1d:31:46:fb:86:ef:
70:25:5e:3f:e7:23:ae:e8:95:53:f7:7f:14:d2:42:91:7c:1e:
c2:a1:6c:37:77:02:ec:92:ce:c2:24:f9:02:35:0f:ae:e0:6e:
e1:eb:49:ac:46:2d:15:cf:5e:75:54:8e:a5:7d:4d:20:c5:5b:
f6:de:29:62:00:10:44:40:18:ac:38:b4:49:4d:f1:ed:ed:15:
84:c3:c9:a6:14:2c:57:33:33:1e:ee:b1:89:8a:b3:cc:f2:3f:
fe:87:81:44:ea:a2:8f:df:22:6f:1a:05:7b:f5:2a:ec:57:f5:
61:ad:8e:08:84:3c:d0:03:73:24:a0:4c:04:c4:9f:1b:59:b1:
dd:27:22:25:a7:d1:12:2a:2c:61:8e:39:2e:d5:85:0a:1f:15:
fa:b4:87:48:c2:55:49:60:a8:d1:95:27:10:f6:33:5b:2b:28:
57:57:1f:18:d1:41:7d:57:1a:cf:da:54:3f:9b:1d:23:9f:2c:
68:e6:8e:8b:ce:2d:3c:58:7b:e3:a9:9b:d6:45:d0:ad:08:d5:
6b:1e:4c:9e:11:6e:d5:a6:97:0e:8c:82:68:5a:75:ce:ba:82:
a0:cf:33:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client