Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier: oPEh5y6Pujxpkyfo1i8KAWAYVpY12tAoc24sxnBV/nY=
Subject key identifier: 4C:56:D8:1C:58:18:E2:FB:EE:E7:C1:F1:AF:41:D9:39:AD:6A:77:3C
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial: 0194BC3C7DD40E56EBA7F89DAD357C75468E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: I4II5YG7LUFBoJ8SBtHVtTTsJRQ.roa (hash: EK6oOV8QOUxKFrS4ArdugAEfde8g8gPU3lkmuBHgdRY=)
2: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: WW24zFZ06duAgbzMbYePLhru46wWFHZ2B66lERuE47c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7d:d4:0e:56:eb:a7:f8:9d:ad:35:7c:75:46:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=4c56d81c5818e2fbeee7c1f1af41d939ad6a773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:97:99:89:3b:97:1f:0b:ba:fd:40:9f:f1:
5b:46:99:10:a8:7d:00:e1:63:dc:ec:ea:30:7b:c2:
1a:21:ca:ae:f5:4a:e0:b7:31:98:b7:bd:67:fb:fa:
bb:0f:ab:9d:63:88:50:10:eb:66:f8:74:bb:f8:94:
78:8b:f5:40:7a:05:9e:bc:34:03:3d:88:0b:04:c5:
1e:3d:86:cd:42:f5:b0:57:d3:f1:1a:bd:9d:44:a2:
1b:0f:4d:d7:fa:52:8d:40:d2:dc:d6:22:83:9b:3e:
20:29:89:a4:32:60:c2:d3:f9:d1:1f:77:ea:8d:5e:
f8:09:71:bd:62:50:9c:c6:ef:79:9d:05:a1:b0:46:
ba:c9:35:71:ff:26:90:37:9d:b4:d5:78:40:2b:9c:
c2:3d:c0:60:de:a6:19:57:9d:97:8e:f9:dd:51:1d:
bd:41:60:af:13:ff:67:8f:7b:fa:5f:1b:12:ab:4a:
68:04:e2:fd:09:99:67:b3:26:0e:bc:7a:ab:b1:3d:
3e:b7:28:70:34:12:c4:2c:4c:89:af:e9:a4:c6:8c:
2e:fc:c1:cc:cd:93:2a:90:68:0f:b8:04:ed:a6:e7:
db:15:56:91:00:35:93:9f:e7:cd:7c:21:2f:8c:63:
03:01:e7:42:fb:c7:17:6e:e2:d7:95:eb:b0:a7:d7:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:D8:1C:58:18:E2:FB:EE:E7:C1:F1:AF:41:D9:39:AD:6A:77:3C
X509v3 Authority Key Identifier:
keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:bc:6e:48:78:be:fb:f5:93:a3:c2:b1:47:9c:cc:4f:45:
04:d7:ed:54:a7:8c:3c:cc:d4:ce:72:53:cb:d2:0a:d7:92:e6:
bc:31:ba:1e:e2:7d:67:34:7a:ae:83:0f:35:33:de:2a:2c:cf:
44:5b:38:9a:11:49:c8:2a:58:62:fd:97:26:bd:2c:59:e5:be:
d3:1d:36:d4:a3:02:5c:0e:6a:be:77:50:68:3f:05:32:e8:d2:
a9:d3:ba:3d:87:c8:08:4f:62:a3:54:e2:c6:10:fe:fa:2a:84:
37:c0:f9:43:07:67:66:26:cd:fb:ea:b1:63:fd:b0:c8:f7:dd:
6e:1a:3b:f8:1c:bc:0e:1a:d8:91:e6:74:93:02:97:09:63:d4:
f9:de:f1:e3:a1:ec:24:85:47:e7:27:95:c3:c6:50:13:18:54:
7d:52:e1:5f:77:3e:ba:4d:ce:79:18:ce:5b:5d:6e:5c:31:fc:
9c:38:77:eb:1a:42:41:a2:b2:0a:b5:d5:3e:65:55:f3:74:dd:
3b:fe:5b:ba:3a:5c:fc:43:f2:f9:9f:49:d8:46:7c:51:0e:4c:
9d:45:eb:b5:2a:8f:9c:ef:7e:ce:4b:b3:f8:6b:d9:ff:a1:7d:
72:33:62:da:5e:9d:1a:f3:4d:a4:e2:a9:67:2b:a4:c5:ed:19:
b6:6f:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:36 2025 by rpki-client